Method ensureTokenBackend

cli/root.go:881–901

ensureTokenBackend returns the session token storage backend, creating it if necessary. This must be called after flags are parsed so we can respect the value of the --use-keyring flag.

()

// This must be called after flags are parsed so we can respect the value of the --use-keyring
// flag.
func (r *RootCmd) ensureTokenBackend() sessionstore.Backend {
	if r.tokenBackend == nil {
		// Checking for the --global-config directory being set is a bit wonky but necessary
		// to allow extensions that invoke the CLI with this flag (e.g. VS code) to continue
		// working without modification. In the future we should modify these extensions to
		// either access the credential in the keyring (like Coder Desktop) or some other
		// approach that doesn't rely on the session token being stored on disk.
		assumeExtensionInUse := r.globalConfig != config.DefaultDir() && !r.useKeyringWithGlobalConfig
		keyringSupported := runtime.GOOS == "windows" || runtime.GOOS == "darwin"
		if r.useKeyring && !assumeExtensionInUse && keyringSupported {
			serviceName := sessionstore.DefaultServiceName
			if r.keyringServiceName != "" {
				serviceName = r.keyringServiceName
			}
			r.tokenBackend = sessionstore.NewKeyringWithService(serviceName)
		} else {
			r.tokenBackend = sessionstore.NewFile(r.createConfig)
		}
	}
	return r.tokenBackend
}

// WithKeyringServiceName sets a custom keyring service name for testing purposes.
// This allows tests to use isolated keyring storage while still exercising the