Getting list of wxSecretStore for my app

If you are using the main C++ distribution of wxWidgets, Feel free to ask any question related to wxWidgets development here. This means questions regarding to C++ and wxWidgets, not compile problems.
Post Reply
User avatar
evstevemd
Part Of The Furniture
Part Of The Furniture
Posts: 2409
Joined: Wed Jan 28, 2009 11:57 am
Location: United Republic of Tanzania

Getting list of wxSecretStore for my app

Post by evstevemd »

Hi,
I want to get all saved credentials for my application to enable user to edit/delete them.
Checking the Documentation, seems impossible, but wanted to confirm anyway.
Is it possible to get all wxSecretStore for a given service?
Chief Justice: We have trouble dear citizens!
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
User avatar
doublemax
Moderator
Moderator
Posts: 19116
Joined: Fri Apr 21, 2006 8:03 pm
Location: $FCE2

Re: Getting list of wxSecretStore for my app

Post by doublemax »

evstevemd wrote: Thu Apr 29, 2021 8:22 am Checking the Documentation, seems impossible, but wanted to confirm anyway.
I think you're right.
evstevemd wrote: Thu Apr 29, 2021 8:22 am Is it possible to get all wxSecretStore for a given service?
I've never looked into the implementations on the different platform, but this may to impossible in principle. This feels like making all usernames of a login-database public. While it doesn't give you direct access to all data, it gives you at least half of the information you need.

I may be totally wrong though, i'm not a security expert. At all.
Use the source, Luke!
PB
Part Of The Furniture
Part Of The Furniture
Posts: 4193
Joined: Sun Jan 03, 2010 5:45 pm

Re: Getting list of wxSecretStore for my app

Post by PB »

I know little to nothing about wxSecretStore.

However, it seems that on MSW WinCred API is used.

WinCred has CredEnumerate(): https://docs.microsoft.com/en-us/window ... enumeratea

So at least in theory and on MSW, enumerating credentials could be possible.
User avatar
evstevemd
Part Of The Furniture
Part Of The Furniture
Posts: 2409
Joined: Wed Jan 28, 2009 11:57 am
Location: United Republic of Tanzania

Re: Getting list of wxSecretStore for my app

Post by evstevemd »

doublemax wrote: Thu Apr 29, 2021 11:58 am
evstevemd wrote: Thu Apr 29, 2021 8:22 am Checking the Documentation, seems impossible, but wanted to confirm anyway.
I think you're right.
evstevemd wrote: Thu Apr 29, 2021 8:22 am Is it possible to get all wxSecretStore for a given service?
I've never looked into the implementations on the different platform, but this may to impossible in principle. This feels like making all usernames of a login-database public. While it doesn't give you direct access to all data, it gives you at least half of the information you need.

I may be totally wrong though, i'm not a security expert. At all.
I see. Thank you.
Chief Justice: We have trouble dear citizens!
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
User avatar
evstevemd
Part Of The Furniture
Part Of The Furniture
Posts: 2409
Joined: Wed Jan 28, 2009 11:57 am
Location: United Republic of Tanzania

Re: Getting list of wxSecretStore for my app

Post by evstevemd »

PB wrote: Thu Apr 29, 2021 12:05 pm I know little to nothing about wxSecretStore.

However, it seems that on MSW WinCred API is used.

WinCred has CredEnumerate(): https://docs.microsoft.com/en-us/window ... enumeratea

So at least in theory and on MSW, enumerating credentials could be possible.
Great pointer, I will look at it.
Thank you!
Chief Justice: We have trouble dear citizens!
Citizens: What it is his honor?
Chief Justice:Our president is an atheist, who will he swear to?
Post Reply