add support for multiple keyring

cli/packages/util/vault.go

@@ -0,0 +1,71 @@
+package util
+
+import (
+	"fmt"
+	"os"
+
+	"github.com/99designs/keyring"
+	log "github.com/sirupsen/logrus"
+	"golang.org/x/term"
+)
+
+// Keyring instance
+var keyringInstance keyring.Keyring
+var keyringInstanceConfig keyring.Config
+
+func GetCurrentVaultBackend() (keyring.BackendType, error) {
+	configFile, err := GetConfigFile()
+	if err != nil {
+		return "", fmt.Errorf("getCurrentVaultBackend: unable to get config file [err=%s]", err)
+	}
+
+	if configFile.VaultBackendType == "" {
+		if keyring.AvailableBackends()[0] == keyring.FileBackend {
+		}
+		return keyring.AvailableBackends()[0], nil
+	}
+
+	return configFile.VaultBackendType, nil
+}
+
+func InitKeyRingInstance() {
+	currentVaultBackend, err := GetCurrentVaultBackend()
+	if err != nil {
+		log.Infof("InitKeyRingInstance: unable to get the current vault backend, [err=%s]", err)
+	}
+
+	keyringInstanceConfig = keyring.Config{
+		FilePasswordFunc:               fileKeyringPassphrasePrompt,
+		ServiceName:                    SERVICE_NAME,
+		LibSecretCollectionName:        SERVICE_NAME,
+		KWalletAppID:                   SERVICE_NAME,
+		KWalletFolder:                  SERVICE_NAME,
+		KeychainTrustApplication:       true,
+		WinCredPrefix:                  SERVICE_NAME,
+		FileDir:                        fmt.Sprintf("~/%s-file-vault", SERVICE_NAME),
+		KeychainAccessibleWhenUnlocked: true,
+	}
+
+	// if the user explicitly sets a vault backend, then only use that
+	if currentVaultBackend != "" {
+		keyringInstanceConfig.AllowedBackends = []keyring.BackendType{keyring.BackendType(currentVaultBackend)}
+	}
+
+	keyringInstance, err = keyring.Open(keyringInstanceConfig)
+	if err != nil {
+		log.Errorf("InitKeyRingInstance: Unable to create instance of Keyring because of [err=%s]", err)
+	}
+}
+
+func fileKeyringPassphrasePrompt(prompt string) (string, error) {
+	if password, ok := os.LookupEnv("INFISICAL_VAULT_FILE_PASSPHRASE"); ok {
+		return password, nil
+	}
+
+	fmt.Fprintf(os.Stderr, "%s: ", prompt)
+	b, err := term.ReadPassword(int(os.Stdin.Fd()))
+	if err != nil {
+		return "", err
+	}
+	return string(b), nil
+}