session

Overview ¶

Package session handles short-lived caching of the master password so that repeated psst commands within a session window skip the password prompt.

The password is written to ~/.persist/.session (chmod 600) as a JSON file containing a base64-encoded password field and an expiry timestamp. The file is deleted automatically when the session expires.

Security note: the password is briefly held in memory as a []byte during read/write. All []byte values are zeroed after use. Go strings created internally by encoding/json are immutable and cannot be zeroed — this is a known Go limitation; the window is minimised by keeping strings short-lived.