[FrameworkBundle] make SodiumVault report bad decryption key accurately

nicolas-grekas · nicolas-grekas · commit d1f91f5cad86 · 2019-10-27T17:21:30.000+01:00
diff --git a/Secrets/SodiumVault.php b/Secrets/SodiumVault.php
@@ -115,7 +115,13 @@ public function reveal(string $name): ?string
             return null;
         }
 
-        return sodium_crypto_box_seal_open(include $file, $this->decryptionKey);
+        if (false === $value = sodium_crypto_box_seal_open(include $file, $this->decryptionKey)) {
+            $this->lastMessage = sprintf('Secrets cannot be revealed as the wrong decryption key was provided for "%s".', $this->getPrettyPath(\dirname($this->pathPrefix).\DIRECTORY_SEPARATOR));
+
+            return null;
+        }
+
+        return $value;
     }
 
     public function remove(string $name): bool

Original file line number	Diff line number	Diff line change
`@@ -115,7 +115,13 @@ public function reveal(string $name): ?string`
`115`	`115`	`return null;`
`116`	`116`	`}`
`117`	`117`
`118`		`- return sodium_crypto_box_seal_open(include $file, $this->decryptionKey);`
	`118`	`+ if (false === $value = sodium_crypto_box_seal_open(include $file, $this->decryptionKey)) {`
	`119`	`+ $this->lastMessage = sprintf('Secrets cannot be revealed as the wrong decryption key was provided for "%s".', $this->getPrettyPath(\dirname($this->pathPrefix).\DIRECTORY_SEPARATOR));`
	`120`	`+`
	`121`	`+ return null;`
	`122`	`+ }`
	`123`	`+`
	`124`	`+ return $value;`
`119`	`125`	`}`
`120`	`126`
`121`	`127`	`public function remove(string $name): bool`