hash-wallet/lib/core/key_service.dart

import 'package:hash_wallet/core/secure_storage.dart';
import 'package:hash_wallet/entities/secret_store_key.dart';
import 'package:hash_wallet/entities/encrypt.dart';

class KeyService {
  KeyService(this._secureStorage);

  final SecureStorage _secureStorage;

  Future<String> getWalletPassword({required String walletName}) async {
    final key =
        generateStoreKeyFor(key: SecretStoreKey.moneroWalletPassword, walletName: walletName);

    // Primary read (current iOS Keychain accessibility).
    var encodedPassword = await _secureStorage.read(key: key);

    // Fallback 1: the legacy read path queries the OTHER iOS Keychain
    // accessibility. A wallet whose password item was written by an older
    // build with different Keychain params reads back null on the primary
    // path — this recovers it. That is the "corrupted seeds after a TestFlight
    // update" failure (Wownero/BTC/etc.: wallet files intact, Keychain entry
    // unreadable under the new params).
    encodedPassword ??= await _secureStorage.readNoIOptions(key: key);

    // Fallback 2: the backup password the Monero password migration saves
    // under a side key BEFORE it re-encrypts, in case the main save did not
    // persist (see WalletLoadingService.updateMoneroWalletPassword).
    if (encodedPassword == null) {
      final bakKey = generateStoreKeyFor(
          key: SecretStoreKey.moneroWalletPassword,
          walletName: '#__${walletName}_bak__#');
      encodedPassword = await _secureStorage.read(key: bakKey) ??
          await _secureStorage.readNoIOptions(key: bakKey);
    }

    // Fail with a clear, CATCHABLE error instead of a null-check crash, so the
    // loader can surface the seed/restore recovery path rather than the app
    // hard-crashing ("crashed and wouldn't let me in").
    if (encodedPassword == null) {
      throw Exception(
          'Wallet password not found in secure storage for "$walletName". '
          'The keychain entry may have been lost across an app update; '
          'restore this wallet from its seed.');
    }

    return decodeWalletPassword(password: encodedPassword);
  }

  Future<void> saveWalletPassword({required String walletName, required String password}) async {
    final key =
        generateStoreKeyFor(key: SecretStoreKey.moneroWalletPassword, walletName: walletName);
    final encodedPassword = encodeWalletPassword(password: password);

    await _secureStorage.write(key: key, value: encodedPassword);
  }

  Future<void> deleteWalletPassword({required String walletName}) async {
    final key =
        generateStoreKeyFor(key: SecretStoreKey.moneroWalletPassword, walletName: walletName);

    await _secureStorage.delete(key: key);
  }
}