#!/bin/sh
# Triglav askpass helper: asks the running Triglav for one secret over a
# local socket. The token in the environment works exactly once.
[ -n "$TRIGLAV_ASKPASS_SOCKET" ] && [ -n "$TRIGLAV_ASKPASS_TOKEN" ] || exit 1
secret=$(printf '%s\n' "$TRIGLAV_ASKPASS_TOKEN" | /usr/bin/nc -w 5 -U "$TRIGLAV_ASKPASS_SOCKET" 2>/dev/null)
[ -n "$secret" ] || exit 1
printf '%s\n' "$secret"
