Hi,
I want to get all saved credentials for my application to enable user to edit/delete them.
Checking the Documentation, seems impossible, but wanted to confirm anyway.
Is it possible to get all wxSecretStore for a given service?
Getting list of wxSecretStore for my app
- evstevemd
- Part Of The Furniture
- Posts: 2409
- Joined: Wed Jan 28, 2009 11:57 am
- Location: United Republic of Tanzania
Getting list of wxSecretStore for my app
Chief Justice: We have trouble dear citizens!
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
Re: Getting list of wxSecretStore for my app
I think you're right.
I've never looked into the implementations on the different platform, but this may to impossible in principle. This feels like making all usernames of a login-database public. While it doesn't give you direct access to all data, it gives you at least half of the information you need.
I may be totally wrong though, i'm not a security expert. At all.
Use the source, Luke!
Re: Getting list of wxSecretStore for my app
I know little to nothing about wxSecretStore.
However, it seems that on MSW WinCred API is used.
WinCred has CredEnumerate(): https://docs.microsoft.com/en-us/window ... enumeratea
So at least in theory and on MSW, enumerating credentials could be possible.
However, it seems that on MSW WinCred API is used.
WinCred has CredEnumerate(): https://docs.microsoft.com/en-us/window ... enumeratea
So at least in theory and on MSW, enumerating credentials could be possible.
- evstevemd
- Part Of The Furniture
- Posts: 2409
- Joined: Wed Jan 28, 2009 11:57 am
- Location: United Republic of Tanzania
Re: Getting list of wxSecretStore for my app
I see. Thank you.doublemax wrote: ↑Thu Apr 29, 2021 11:58 amI think you're right.
I've never looked into the implementations on the different platform, but this may to impossible in principle. This feels like making all usernames of a login-database public. While it doesn't give you direct access to all data, it gives you at least half of the information you need.
I may be totally wrong though, i'm not a security expert. At all.
Chief Justice: We have trouble dear citizens!
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
- evstevemd
- Part Of The Furniture
- Posts: 2409
- Joined: Wed Jan 28, 2009 11:57 am
- Location: United Republic of Tanzania
Re: Getting list of wxSecretStore for my app
Great pointer, I will look at it.PB wrote: ↑Thu Apr 29, 2021 12:05 pm I know little to nothing about wxSecretStore.
However, it seems that on MSW WinCred API is used.
WinCred has CredEnumerate(): https://docs.microsoft.com/en-us/window ... enumeratea
So at least in theory and on MSW, enumerating credentials could be possible.
Thank you!
Chief Justice: We have trouble dear citizens!
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?