General > Security > Secure Storage
preferences page and are visible to the end user.When storing information (such as a password) in the secure storage, the information gets encrypted with a master password. The interesting question about this process is how to store the master password?
The answer is in the password provider implementations. In a logical sense, password provider modules represent a trusted 3rd party, an external black box, which we trust to store our master password. That black box can be an operating system, some piece of hardware, or the user himself.
Several password provider modules are supplied with the SDK. They provide a basic "fallback" support and an improved support for some specific operating systems. For the most part you won't need to create a password provider - unless you'd like to add (or improve) integration with an operating system or add interaction with some specific hardware. In this case the set of password providers can be easily extended.
The password provider modules have to be described as an extension to the extension point
org.eclipse.equinox.security.secureStorage.
The extension must specify an ID; the qualified ID of the extension will be used as an ID of the provider
module and must not be changed between releases. The optional name and description of the password provider
show up in the
General > Security > Secure Storage
preferences page and are visible to the end user.
Provider declaration includes the fully qualified class name that implements the provider, the numerical priority value, and a set of hints.
The priority is used to select a password provider when new data is added to the secure storage. The enabled provider with the highest priority is used by default. (Note that this can be overridden programmatically using IProviderHints#REQUIRED_MODULE_ID or by using the runtime option "-eclipse.password".)
The priority is an integer number from 0 to 10, with 10 being the highest priority. Consider adding your providers in the mid-range of priorities, 2 to 7, reserving top and bottom values.
An end user can disable a password provider via Secure Storage preferences page. Disabled providers are not considered when new data is added to the secure storage, but can be called on data retrieval if the data was originally encrypted with this provider.
Provider declaration can also specify a set of hints to help optimize interaction between the secure storage framework and the provider. The set of hints is open and can be extended in future. At the time of this writing the only expected hint is "AutomaticPasswordGeneration". This hint informs the framework that the password provider creates a master password without user interaction.
The class implementing the password provider must extend the PasswordProvider class. The central point of that class is the getPassword() method that returns the master password for the provider for the current user. The method receives hints when a new password is expected to be created (as opposing to retrieving previously generated master password).
If your password provider has user interaction or has alternative paths to obtain the master password, you might consider overriding the PasswordProvider#retryOnError() method to inform the secure storage that the provider might be able to obtain a "better" password. For example, consider a password provider with the master password entered by the user. If the password entered was invalid, then the PasswordProvider#retryOnError() method will be consulted to see if the password provider can obtain a correct password.