1527745 - Implement OS re-authentication on Linux (Gnome Keyring)

Status: NEW

(Core :: Security: PSM, enhancement, P4)

Description

[Matthew N. [:MattN]]

Filing this to track the blocker to shipping credit card storage. It seems like we may have to settle with locking the keystore at the OS level.

Comment 2

[Zibi Braniecki [:zbraniecki][:gandalf]]

We would like to initially narrow it down and only implement it for Gnome Keyring.

Comment 3

[J.C. Jones [:jcj] (he/him)]

Years ago, our strategy for how to accomplish a "check that the user can enter the account credential" was to use gnome-keyring's gnome_keyring_lock and gnome_keyring_unlock with an auxiliary keyring only used for this purpose. For whatever reason, three years ago, we could only use lock_all, perhaps because the specific lock didn't exist, or we couldn't programmatically construct a keyring. I don't recall which was the problem.

This lock/unlock is just a roundabout way to get to what we actually want: a boolean of whether the user is able to reauthenticate. If they can't, we actually don't want to lose access to the data we're using with libsecret, or at least we want to be very careful with what secret(s) we lose access to. On MacOS and Windows we have that capability, of getting authentication without actually locking.