himalaya 2.0.0

CLI to manage emails
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

//! Secret prompts shared by the discovered-backend wizards (JMAP, Gmail,
//! Microsoft Graph).
//!
//! Delegates to pimalaya-cli's OS-aware pickers: [`configure_password`]
//! offers the OS keyrings, [`configure_token`] the OAuth 2.0 token
//! brokers (Ortie, pizauth, oama). Both also allow a custom command or a
//! raw value. A known provider or broker yields an argv command (a TOML
//! array); a custom command is a shell string. Himalaya only *reads* the
//! secret: the value must already be stored, and a missing one surfaces
//! when the account is tested right after.

use anyhow::Result;
use pimalaya_cli::wizard::keyring::{self, SecretChoice};
use pimalaya_config::secret::Secret;

use crate::wizard::account::{command_secret, shell_secret};

/// Prompts for a password [`Secret`] through the shared keyring picker.
///
/// `key_default` seeds the keyring entry (typically
/// `<account>-<protocol>`); the entry is used verbatim, so a pre-existing
/// secret is read exactly as named.
pub fn configure_password(label: &str, key_default: &str) -> Result<Secret> {
    to_secret(keyring::prompt_secret(label, key_default)?)
}

/// Prompts for an API token [`Secret`] through the shared token picker,
/// which combines the OS keyrings (for a token generated on the provider)
/// with the OAuth 2.0 brokers when `oauth` is true (a broker refreshes and
/// prints a fresh token on every read).
///
/// `key_default` seeds the keyring entry or the broker account handle
/// (typically the Himalaya account name).
pub fn configure_token(label: &str, key_default: &str, oauth: bool) -> Result<Secret> {
    to_secret(keyring::prompt_token(label, key_default, oauth)?)
}

fn to_secret(choice: SecretChoice) -> Result<Secret> {
    Ok(match choice {
        SecretChoice::Command(argv) => command_secret(argv)?,
        SecretChoice::Shell(line) => shell_secret(&line)?,
        SecretChoice::Raw(secret) => Secret::Raw(secret),
    })
}