Keychain Integration Documentation

OS-native keychain integration for secure credential storage across platforms.

Status

✅ Complete - Fully implemented for macOS, Windows, and Linux

Quick Links

• API Specification - Backend API endpoints and contracts
• API Reference - Complete API documentation
• Implementation Guide - Technical implementation details
• Service Implementation - Credential service architecture
• Integration Summary - How all pieces fit together

Feature Overview

Secure database credential storage using native OS keychain services:

• macOS: Keychain Access
• Windows: Credential Manager
• Linux: Secret Service API (libsecret)

Key Components

• Backend API: Wails-based keychain access
• Credential Service: Go service for cross-platform keychain operations
• Frontend Integration: Secure credential retrieval for connections

Security Properties

• Credentials never stored in plaintext
• OS-level encryption and access control
• Per-user credential isolation
• Secure credential transmission over Wails bridge

Architecture

Frontend (React)
    ↓
Wails Bridge
    ↓
Credential Service (Go)
    ↓
OS Keychain API
    ↓
Native Keychain (encrypted storage)

Usage Example

// Store credential
await setDatabasePassword(connectionId, password);

// Retrieve credential
const password = await getDatabasePassword(connectionId);

// Delete credential
await deleteDatabasePassword(connectionId);