init

lib/subsonic/credentials.dart

@@ -0,0 +1,64 @@
+import 'package:flutter_secure_storage/flutter_secure_storage.dart';
+
+/// A Subsonic server connection. The password is only ever held in memory and
+/// in the platform secure store — never in plain app storage (mirrors Ratune's
+/// keyring-first secret handling).
+class SubsonicCredentials {
+  const SubsonicCredentials({
+    required this.url,
+    required this.username,
+    required this.password,
+    this.alias,
+  });
+
+  final String url;
+  final String username;
+  final String password;
+
+  /// Optional display label shown instead of the raw URL (Ratune `[server].alias`).
+  final String? alias;
+
+  String get display => alias?.isNotEmpty == true ? alias! : Uri.parse(url).host;
+}
+
+/// Persists [SubsonicCredentials] to the platform secure store
+/// (Keychain / Keystore / libsecret).
+class CredentialStore {
+  CredentialStore([FlutterSecureStorage? storage])
+      : _storage = storage ?? const FlutterSecureStorage();
+
+  final FlutterSecureStorage _storage;
+
+  static const _kUrl = 'subsonic_url';
+  static const _kUser = 'subsonic_username';
+  static const _kPass = 'subsonic_password';
+  static const _kAlias = 'subsonic_alias';
+
+  Future<void> save(SubsonicCredentials creds) async {
+    await _storage.write(key: _kUrl, value: creds.url);
+    await _storage.write(key: _kUser, value: creds.username);
+    await _storage.write(key: _kPass, value: creds.password);
+    await _storage.write(key: _kAlias, value: creds.alias ?? '');
+  }
+
+  Future<SubsonicCredentials?> load() async {
+    final url = await _storage.read(key: _kUrl);
+    final user = await _storage.read(key: _kUser);
+    final pass = await _storage.read(key: _kPass);
+    if (url == null || user == null || pass == null) return null;
+    final alias = await _storage.read(key: _kAlias);
+    return SubsonicCredentials(
+      url: url,
+      username: user,
+      password: pass,
+      alias: (alias == null || alias.isEmpty) ? null : alias,
+    );
+  }
+
+  Future<void> clear() async {
+    await _storage.delete(key: _kUrl);
+    await _storage.delete(key: _kUser);
+    await _storage.delete(key: _kPass);
+    await _storage.delete(key: _kAlias);
+  }
+}