armoire 0.1.2

A cross-platform library for working with desktop secrets.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85

//! Windows backend for [`crate::secrets`], implemented with Credential Vault
//! APIs.
//!
//! This module provides the Windows implementation of the
//! `SecretStoreBackend` trait.
//!
use crate::secrets::{Secret, SecretError, SecretStoreBackend};
use windows::{Security::Credentials::*, core::HSTRING};

pub(crate) struct Backend;

impl SecretStoreBackend for Backend {
    fn add(secret: &Secret) -> Result<(), SecretError> {
        if secret.value().is_empty() {
            return Err(SecretError::EmptyValue);
        }
        if Self::get(secret.name()).is_ok() {
            return Err(SecretError::AlreadyExists);
        }
        let cred = PasswordCredential::CreatePasswordCredential(
            &HSTRING::from(secret.name()),
            &HSTRING::from("default"),
            &HSTRING::from(secret.value()),
        )
        .map_err(|e| SecretError::PlatformError(format!("Failed to create credential: {}", e)))?;
        let vault = PasswordVault::new()
            .map_err(|e| SecretError::PlatformError(format!("Failed to create vault: {}", e)))?;
        vault
            .Add(&cred)
            .map_err(|e| SecretError::PlatformError(format!("Failed to add secret: {}", e)))?;
        Ok(())
    }

    fn get(name: &str) -> Result<Secret, SecretError> {
        let vault = PasswordVault::new()
            .map_err(|e| SecretError::PlatformError(format!("Failed to create vault: {}", e)))?;
        let cred = vault
            .Retrieve(&HSTRING::from(name), &HSTRING::from("default"))
            .map_err(|_| SecretError::NotFound)?;
        Ok(Secret::new(
            name.to_string(),
            cred.Password()
                .map_err(|e| {
                    SecretError::PlatformError(format!("Failed to retrieve password: {}", e))
                })?
                .to_string(),
        ))
    }

    fn remove(name: &str) -> Result<(), SecretError> {
        let vault = PasswordVault::new()
            .map_err(|e| SecretError::PlatformError(format!("Failed to create vault: {}", e)))?;
        let cred = vault
            .Retrieve(&HSTRING::from(name), &HSTRING::from("default"))
            .map_err(|_| SecretError::NotFound)?;
        vault
            .Remove(&cred)
            .map_err(|e| SecretError::PlatformError(format!("Failed to remove secret: {}", e)))?;
        Ok(())
    }

    fn update(secret: &Secret) -> Result<(), SecretError> {
        if secret.value().is_empty() {
            return Err(SecretError::EmptyValue);
        }
        let vault = PasswordVault::new()
            .map_err(|e| SecretError::PlatformError(format!("Failed to create vault: {}", e)))?;
        let cred = vault
            .Retrieve(&HSTRING::from(secret.name()), &HSTRING::from("default"))
            .map_err(|_| SecretError::NotFound)?;
        vault
            .Remove(&cred)
            .map_err(|e| SecretError::PlatformError(format!("Failed to remove secret: {}", e)))?;
        let new_cred = PasswordCredential::CreatePasswordCredential(
            &HSTRING::from(secret.name()),
            &HSTRING::from("default"),
            &HSTRING::from(secret.value()),
        )
        .map_err(|e| SecretError::PlatformError(format!("Failed to create credential: {}", e)))?;
        vault
            .Add(&new_cred)
            .map_err(|e| SecretError::PlatformError(format!("Failed to add secret: {}", e)))?;
        Ok(())
    }
}