Class KeychainWithFileFallback

packages/cli/src/auth/token-store.ts:150–191

}

class KeychainWithFileFallback implements TokenStore {
  readonly backend = 'keyring' as const;
  constructor(
    private readonly keychain: TokenStore,
    private readonly file: FileBackend,
  ) {}

  async get(host: string): Promise<TokenEntry | null> {
    const fromKeychain = await this.keychain.get(host);
    if (fromKeychain != null) return fromKeychain;

    const fromFile = await this.file.get(host);
    if (fromFile == null) return null;

    try {
      await this.keychain.set(host, fromFile.login, fromFile.token, {
        gitProtocol: fromFile.gitProtocol,
        name: fromFile.name,
        email: fromFile.email,
      });
      await this.file.clear(host);
      process.stderr.write(
        `[auth] migrated ${host} credential from ~/.ok/auth.yml to the OS keychain\n`,
      );
    } catch {}
    return fromFile;
  }

  set(
    host: string,
    login: string,
    token: string,
    extra?: Pick<TokenEntry, 'gitProtocol' | 'name' | 'email'>,
  ): Promise<void> {
    return this.keychain.set(host, login, token, extra);
  }

  async clear(host: string): Promise<void> {
    await this.keychain.clear(host);
    if ((await this.file.get(host)) != null) await this.file.clear(host);
  }
}

export async function createTokenStore(
  authFile?: string,