#RI-6146 - POC migrate BE from keytar to electron.safeStorage

Author: egor-zalenski

redisinsight/api/config/default.ts

@@ -87,6 +87,7 @@ export default {
   },
   encryption: {
     keytar: process.env.RI_ENCRYPTION_KEYTAR ? process.env.RI_ENCRYPTION_KEYTAR === 'true' : true, // enabled by default
+    keytarService: process.env.RI_ENCRYPTION_KEYTAR_SERVICE || 'redisinsight',
     encryptionIV: process.env.RI_ENCRYPTION_IV || Buffer.alloc(16, 0),
     encryptionAlgorithm: process.env.RI_ENCRYPTION_ALGORYTHM || 'aes-256-cbc',
   },

redisinsight/api/src/modules/encryption/strategies/keytar-encryption.strategy.ts

@@ -11,7 +11,6 @@ import {
 } from 'src/modules/encryption/exceptions';
 import config, { Config } from 'src/utils/config';
 
-const SERVICE = 'redisinsight';
 const ACCOUNT = 'app';
 const SERVER_CONFIG = config.get('server') as Config['server'];
 const ENCRYPTION_CONFIG = config.get('encryption') as Config['encryption'];
@@ -54,7 +53,7 @@ export class KeytarEncryptionStrategy implements IEncryptionStrategy {
    */
   private async getPassword(): Promise<string | null> {
     try {
-      return await this.keytar.getPassword(SERVICE, ACCOUNT);
+      return await this.keytar.getPassword(ENCRYPTION_CONFIG.keytarService, ACCOUNT);
     } catch (error) {
       this.logger.error('Unable to get password');
       throw new KeytarUnavailableException();
@@ -68,7 +67,7 @@ export class KeytarEncryptionStrategy implements IEncryptionStrategy {
    */
   private async setPassword(password: string): Promise<void> {
     try {
-      await this.keytar.setPassword(SERVICE, ACCOUNT, password);
+      await this.keytar.setPassword(ENCRYPTION_CONFIG.keytarService, ACCOUNT, password);
     } catch (error) {
       this.logger.error('Unable to set password');
       throw new KeytarUnavailableException();