Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear a password that will not decrypt #158092

Closed
wants to merge 1 commit into from

Conversation

ChaseKnowlden
Copy link
Contributor

This PR resolves #151654

@@ -57,6 +57,8 @@ export class MainThreadSecretState extends Disposable implements MainThreadSecre
await this.credentialsService.setPassword(fullKey, key, encryptedForSet);
const passwordEncrypted = await this.credentialsService.getPassword(fullKey, key);
decrypted = passwordEncrypted && await this.encryptionService.decrypt(passwordEncrypted);
} finally {
this.credentialsService.deletePassword(fullKey, key);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

By doing this unconditionally in the new finally block aren't you always deleting the stored password, even one for which there isn't a problem?

@gjsjohnmurray
Copy link
Contributor

I think #159506 makes this PR obsolete.

@github-actions github-actions bot locked and limited conversation to collaborators Oct 14, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Clear passwords that don't decrypt
3 participants