cargo-crev 0.27.1

Distributed Code REView system for verifying security and quality of Cargo dependencies
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

use std::fmt::Display;

use security_framework::os::macos::keychain::SecKeychain;

const NOT_FOUND: i32 = -25300; // errSecItemNotFound
const SERVICE: &str = "cargo-crev:id";
/// Used to save or retrieve passphrase from KeyChain as "for any id" if we have only one id.
pub const NO_ID: &str = "";

pub fn retrieve_existing_passphrase(id: &str) -> Result<String, anyhow::Error> {
    let keychain = SecKeychain::default()?;
    let not_found = security_framework::base::Error::from(NOT_FOUND).code();

    match keychain.find_generic_password(SERVICE, id) {
        Ok((pass, _)) => {
            let password = String::from_utf8(pass.as_ref().to_vec())?;
            Ok(password)
        }
        Err(e) if e.code() == not_found => Err(Error::NotFound.into()),
        Err(e) => Err(e.into()),
    }
}

pub fn save_new_passphrase(id: &str, password: &str) -> Result<(), anyhow::Error> {
    let keychain = SecKeychain::default()?;
    let not_found = security_framework::base::Error::from(NOT_FOUND).code();

    match keychain.find_generic_password(SERVICE, id) {
        Err(e) => {
            if e.code() == not_found {
                keychain.add_generic_password(SERVICE, id, password.as_bytes())?;
            }
        }
        Ok((_, mut item)) => {
            item.set_password(password.as_bytes())?;
        }
    }
    Ok(())
}

#[derive(Debug, Clone, Copy)]
pub enum Error {
    NotFound,
}

impl std::error::Error for Error {}

impl Display for Error {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        match self {
            Error::NotFound => write!(f, "Credentials not found"),
        }
    }
}