Class: Ironclad::Cache::Keychain

Inherits:
Object
  • Object
show all
Defined in:
lib/ironclad/cache/keychain.rb

Overview

macOS Keychain via the ‘security` tool. The cache never expires; a key rotation is handled by writing (-U updates) the new value.

Instance Method Summary collapse

Constructor Details

#initialize(account) ⇒ Keychain

Returns a new instance of Keychain.



10
11
12
 
# File 'lib/ironclad/cache/keychain.rb', line 10

def initialize()
  @account = 
end

Instance Method Details

#read(name) ⇒ Object 



14
15
16
17
18
19
20
 
# File 'lib/ironclad/cache/keychain.rb', line 14

def read(name)
  out, _err, status = Open3.capture3(
    'security', 'find-generic-password',
    '-a', @account, '-s', name, '-w'
  )
  status.success? ? out.chomp : nil
end

#write(name, key) ⇒ Object 



22
23
24
25
26
27
28
29
30
 
# File 'lib/ironclad/cache/keychain.rb', line 22

def write(name, key)
  # The key passes via argv (briefly visible to the same user's `ps`); the
  # security tool has no stdin input mode. Acceptable for a local cache.
  system(
    'security', 'add-generic-password', '-U',
    '-a', @account, '-s', name, '-w', key,
    out: File::NULL, err: File::NULL
  )
end