DeleteSecretsForTenant deletes all secrets for a given tenant.
(tenant string)
| 31 | |
| 32 | // DeleteSecretsForTenant deletes all secrets for a given tenant. |
| 33 | func DeleteSecretsForTenant(tenant string) error { |
| 34 | var multiErrors []string |
| 35 | |
| 36 | // Refresh tokens aren't supported anymore; this remains to clear existing ones. |
| 37 | if err := keyring.Delete(secretRefreshToken, tenant); err != nil { |
| 38 | if !errors.Is(err, keyring.ErrNotFound) { |
| 39 | multiErrors = append(multiErrors, fmt.Sprintf("failed to delete refresh token from keyring: %s", err)) |
| 40 | } |
| 41 | } |
| 42 | |
| 43 | if err := keyring.Delete(secretClientSecret, tenant); err != nil { |
| 44 | if !errors.Is(err, keyring.ErrNotFound) { |
| 45 | multiErrors = append(multiErrors, fmt.Sprintf("failed to delete client secret from keyring: %s", err)) |
| 46 | } |
| 47 | } |
| 48 | |
| 49 | for i := 0; i < secretAccessTokenMaxChunks; i++ { |
| 50 | if err := keyring.Delete(fmt.Sprintf("%s %d", secretAccessToken, i), tenant); err != nil { |
| 51 | if !errors.Is(err, keyring.ErrNotFound) { |
| 52 | multiErrors = append(multiErrors, fmt.Sprintf("failed to delete access token from keyring: %s", err)) |
| 53 | } |
| 54 | } |
| 55 | } |
| 56 | |
| 57 | if len(multiErrors) == 0 { |
| 58 | return nil |
| 59 | } |
| 60 | |
| 61 | return errors.New(strings.Join(multiErrors, ", ")) |
| 62 | } |
| 63 | |
| 64 | func StoreAccessToken(tenant, value string) error { |
| 65 | // First, clear any existing chunks to prevent concatenation issues. |