Avoid storing the password in the configuration

The password (or any other secret), is now cached in the client process
(in-memory only), and delivered to the resource via command.
The resource avoids doing any operations against the source until the
secret is available.

1 files changed, 3 insertions, 0 deletions

diff --git a/common/CMakeLists.txt b/common/CMakeLists.txt
index 8421fc2..b0e0d04 100644
--- a/common/CMakeLists.txt
+++ b/common/CMakeLists.txt
@@ -33,6 +33,7 @@ set(storage_LIBS lmdb)
 
 set(command_SRCS
     store.cpp
+    secretstore.cpp
     notifier.cpp
     resourcecontrol.cpp
     modelresult.cpp
@@ -97,6 +98,7 @@ generate_flatbuffers(
     commands/revisionreplayed
     commands/inspection
     commands/flush
+    commands/secret
     domain/contact
     domain/addressbook
     domain/event
@@ -144,6 +146,7 @@ install(FILES
     test.h
     log.h
     flush.h
+    secretstore.h
     ${CMAKE_CURRENT_BINARY_DIR}/sink_export.h
     DESTINATION ${INCLUDE_INSTALL_DIR}/${PROJECT_NAME} COMPONENT Devel
 )