alks/src/lib/getPasswordFromKeystore.ts

CLI for working with ALKS

import { getKeytar } from './getKeytar';
import { log } from './log';
import { getCredentials } from './state/credentials';

const SERVICE = 'alkscli';
const ALKS_PASSWORD = 'alkspassword';

export async function getPasswordFromKeystore(): Promise<string | undefined> {
  try {
    const keytar = await getKeytar();
    const password =
      (await keytar.getPassword(SERVICE, ALKS_PASSWORD)) ?? undefined;

    log(`found password "${password}" in keystore`, {
      unsafe: true,
      alt: `found password of ${
        password
          ? `${password.length} characters starting with "${password.substring(
              0,
              1
            )}"`
          : `undefined`
      } in keystore`,
    });

    return password;
  } catch (e) {
    log((e as Error).message);
    log('Failed to use keychain. Checking for plaintext file');

    const credentials = await getCredentials();
    return credentials.password ?? undefined;
  }
}