secretsManager.ts

import type { SecretStorage, Disposable } from "vscode";

const SESSION_TOKEN_KEY = "sessionToken";

const LOGIN_STATE_KEY = "loginState";

type AuthAction = "login" | "logout";

export class SecretsManager {
	constructor(private readonly secrets: SecretStorage) {}

	/**
	 * Set or unset the last used token.
	 */
	public async setSessionToken(sessionToken?: string): Promise<void> {
		if (!sessionToken) {
			await this.secrets.delete(SESSION_TOKEN_KEY);
		} else {
			await this.secrets.store(SESSION_TOKEN_KEY, sessionToken);
		}
	}

	/**
	 * Get the last used token.
	 */
	public async getSessionToken(): Promise<string | undefined> {
		try {
			return await this.secrets.get(SESSION_TOKEN_KEY);
		} catch {
			// The VS Code session store has become corrupt before, and
			// will fail to get the session token...
			return undefined;
		}
	}

	/**
	 * Triggers a login/logout event that propagates across all VS Code windows.
	 * Uses the secrets storage onDidChange event as a cross-window communication mechanism.
	 * Appends a timestamp to ensure the value always changes, guaranteeing the event fires.
	 */
	public async triggerLoginStateChange(action: AuthAction): Promise<void> {
		const date = new Date().toISOString();
		await this.secrets.store(LOGIN_STATE_KEY, `${action}-${date}`);
	}

	/**
	 * Listens for login/logout events from any VS Code window.
	 * The secrets storage onDidChange event fires across all windows, enabling cross-window sync.
	 */
	public onDidChangeLoginState(
		listener: (state?: AuthAction) => Promise<void>,
	): Disposable {
		return this.secrets.onDidChange(async (e) => {
			if (e.key === LOGIN_STATE_KEY) {
				const state = await this.secrets.get(LOGIN_STATE_KEY);
				if (state?.startsWith("login")) {
					listener("login");
				} else if (state?.startsWith("logout")) {
					listener("logout");
				} else {
					// Secret was deleted or is invalid
					listener(undefined);
				}
			}
		});
	}
}