Secrets¶

Nativella\Secrets keeps tokens and passwords in the keychain of the system, which encrypts them: Secret Service (GNOME Keyring, KWallet) on Linux, the Keychain on macOS, the Credential Manager on Windows. Use it for what must not lie in clear in the database or the settings: an API token, the password of an account.

$secrets->set('github-token', $token);

$token = $secrets->get('github-token'); // null when there is none

$secrets->delete('github-token');

Method
`get(string $key): ?string`	The secret, null when there is none.
`set(string $key, string $value): void`	Creates or replaces it.
`delete(string $key): void`	Deletes it. Nothing happens if there is none.

The secrets of an application are filed under its identifier: two applications never see each other's. On Linux, the keychain must be unlocked, which a desktop session does at login; otherwise the system asks the user for its password first.

Desktop only: on a phone, Secrets throws a NativeCallException.

Secrets and the installation secret¶

Nativella\Runtime::secret() is something else: a random key that Nativella creates for each installation, for the framework to sign and encrypt with (Symfony's APP_SECRET, Laravel's APP_KEY). See Configuration.