Function GetMasterKey

pkg/utils/crypto.go:32–70

GetMasterKey returns the cached master key, prompting for it if necessary.

()

// GetMasterKey returns the cached master key, prompting for it if necessary.
func GetMasterKey() ([]byte, error) {
	masterKeyMu.Lock()
	defer masterKeyMu.Unlock()

	if len(masterKey) > 0 {
		return masterKey, nil
	}

	// Try environment variable first
	if envKey := os.Getenv(keyEnvVar); envKey != "" {
		key, err := deriveKey([]byte(envKey))
		if err != nil {
			return nil, err
		}
		masterKey = key
		return masterKey, nil
	}

	// Prompt interactively
	fmt.Print("Enter master password: ")
	pwdBytes, err := term.ReadPassword(int(os.Stdin.Fd()))
	fmt.Println()
	if err != nil {
		return nil, fmt.Errorf("failed to read master password: %w", err)
	}
	if len(pwdBytes) == 0 {
		return nil, nil
	}

	key, err := deriveKey(pwdBytes)
	for i := range pwdBytes {
		pwdBytes[i] = 0
	}
	if err != nil {
		return nil, err
	}
	masterKey = key
	return masterKey, nil
}

// GetCachedMasterKey returns the master key only if already cached or available
// via the environment variable, without prompting interactively.