init

internal/keychain/keychain.go

@@ -0,0 +1,31 @@
+// Package keychain stores and retrieves secrets (passwords, JWT tokens)
+// in the macOS Keychain. On non-darwin platforms it falls back to an
+// in-memory store (to be replaced with a platform-appropriate backend).
+//
+// Secrets are keyed by the server profile name. The Keychain service
+// name is the application bundle identifier.
+package keychain
+
+import (
+	"fmt"
+
+	"lmvpn/internal/paths"
+)
+
+// ServiceName is the Keychain service under which all lmvpn secrets
+// are stored.
+const ServiceName = paths.BundleID
+
+// ErrNotFound is returned when a secret is not present in the store.
+var ErrNotFound = fmt.Errorf("secret not found")
+
+// Store is the secret storage interface.
+type Store interface {
+	SetPassword(profileName, password string) error
+	GetPassword(profileName string) (string, error)
+	DeletePassword(profileName string) error
+	SetToken(profileName, token string) error
+	GetToken(profileName string) (string, error)
+	DeleteToken(profileName string) error
+	DeleteAll(profileName string) error
+}