Function readSecretsFromFile

pkg/secretstore/secretstore.go:78–124

must hold lock

()

// must hold lock
func readSecretsFromFile() (map[string]string, error) {
	configDir := wavebase.GetWaveConfigDir()
	secretsPath := filepath.Join(configDir, SecretsFileName)

	encryptedData, err := os.ReadFile(secretsPath)
	if err != nil {
		if !os.IsNotExist(err) {
			log.Printf("secretstore: could not read secrets file: %v\n", err)
		}
		if err := getLinuxStorageBackend(); err != nil {
			log.Printf("secretstore: could not get linux storage backend: %v\n", err)
		}
		return make(map[string]string), nil
	}

	rpcClient := wshclient.GetBareRpcClient()
	ctx, cancel := context.WithTimeout(context.Background(), EncryptionTimeout*time.Millisecond)
	defer cancel()

	decryptData := wshrpc.CommandElectronDecryptData{
		CipherText: string(encryptedData),
	}
	rpcOpts := &wshrpc.RpcOpts{
		Route:   wshutil.ElectronRoute,
		Timeout: EncryptionTimeout,
	}

	result, err := wshclient.ElectronDecryptCommand(rpcClient, decryptData, rpcOpts)
	if err != nil {
		return nil, fmt.Errorf("failed to decrypt secrets: %w", err)
	}

	if ctx.Err() != nil {
		return nil, fmt.Errorf("decryption timeout: %w", ctx.Err())
	}

	if result.StorageBackend != "" {
		linuxStorageBackend = result.StorageBackend
	}

	var decryptedSecrets map[string]string
	if err := json.Unmarshal([]byte(result.PlainText), &decryptedSecrets); err != nil {
		return nil, fmt.Errorf("failed to parse secrets: %w", err)
	}

	return decryptedSecrets, nil
}

func initSecretStore() error {
	lock.Lock()