Function GetAPIKeyFromHelperWithCache

util/api_key_helper.go:114–146

GetAPIKeyFromHelper executes a shell command to dynamically generate an API key. Platform-specific implementations are in api_key_helper_unix.go and api_key_helper_windows.go. The command is executed with a timeout controlled by the provided context. It returns the trimmed output from stdout, or an

(
	ctx context.Context,
	helperCmd string,
	refreshInterval time.Duration,
)

//
// Security note: The returned API key is sensitive and should not be logged.
func GetAPIKeyFromHelperWithCache(
	ctx context.Context,
	helperCmd string,
	refreshInterval time.Duration,
) (string, error) {
	if helperCmd == "" {
		return "", errors.New("api_key_helper command is empty")
	}

	// Try to read from cache
	cache, err := readCache(helperCmd)
	if err != nil {
		// If cache read fails, log but continue to fetch fresh key
		// Don't fail the entire operation just because cache is broken
		cache = nil
	}

	// Check if we need to refresh
	if !needsRefresh(cache, refreshInterval) {
		return cache.APIKey, nil
	}

	// Fetch new API key
	apiKey, err := GetAPIKeyFromHelper(ctx, helperCmd)
	if err != nil {
		return "", err
	}

	// Write to cache (ignore errors to not block the operation)
	_ = writeCache(helperCmd, apiKey)

	return apiKey, nil
}