Class Secrets

CodenameOne/src/com/codename1/security/Secrets.java:33–132

/// On the simulator or a local (non-cloud) build there is no build key, so
/// [#get(String)] returns the cached value if any and otherwise `null`.
public final class Secrets {

    private static final String CACHE_PREFIX = "cn1secret.";
    private static final String PROP_ENDPOINT = "secrets.cloud.endpoint";
    private static final String PROP_BUILD_KEY = "build_key";
    private static final String PROP_PACKAGE = "package_name";
    private static final String DEFAULT_ENDPOINT = "https://cloud.codenameone.com/api/v2/secrets";

    private Secrets() {
    }

    /// The secret named `name` -- from the keychain cache when present,
    /// otherwise fetched from the cloud vault and cached. Returns `null` when
    /// it is unavailable (undefined, not app-readable, or offline with no
    /// cached copy). The first fetch blocks on the network, so call this off
    /// the EDT.
    public static String get(String name) {
        String cached = SecureStorage.getInstance().get(CACHE_PREFIX + name);
        if (cached != null) {
            return cached;
        }
        return refresh(name);
    }

    /// As [#get(String)] but returns `defaultValue` when the secret is absent.
    public static String get(String name, String defaultValue) {
        String v = get(name);
        return v == null ? defaultValue : v;
    }

    /// Force a fresh fetch from the cloud vault, replacing the keychain cache.
    /// Returns the new value, or `null` when unavailable.
    public static String refresh(String name) {
        String v = fetch(name);
        if (v != null) {
            SecureStorage.getInstance().set(CACHE_PREFIX + name, v);
        }
        return v;
    }

    /// Drop the cached copy of `name` from the keychain; the next [#get(String)]
    /// re-fetches it.
    public static void clear(String name) {
        SecureStorage.getInstance().remove(CACHE_PREFIX + name);
    }

    private static String fetch(String name) {
        String key = Display.getInstance().getProperty(PROP_BUILD_KEY, "");
        if (key == null || key.length() == 0) {
            return null; // simulator / local build: no cloud secrets
        }
        String url = Display.getInstance().getProperty(PROP_ENDPOINT, DEFAULT_ENDPOINT);
        if (url == null || url.length() == 0) {
            return null;
        }
        try {
            StringBuilder sb = new StringBuilder();
            sb.append('{');