[CLI-2969] Prevent double decryption on Windows (#2966)

confluentinc · Dec 9, 2024 · 4c8123a · 4c8123a
1 parent 9bd4089
commit 4c8123a
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/pkg/config/api_key_pair.go b/pkg/config/api_key_pair.go
@@ -1,7 +1,6 @@
 package config
 
 import (
-	"runtime"
 	"strings"
 
 	"github.com/confluentinc/cli/v4/pkg/secret"
@@ -16,7 +15,7 @@ type APIKeyPair struct {
 }
 
 func (c *APIKeyPair) DecryptSecret() error {
-	if (strings.HasPrefix(c.Secret, secret.AesGcm) && c.Salt != nil) || runtime.GOOS == "windows" {
+	if (strings.HasPrefix(c.Secret, secret.AesGcm) && c.Salt != nil) || strings.HasPrefix(c.Secret, secret.Dpapi) {
 		decryptedSecret, err := secret.Decrypt(c.Key, c.Secret, c.Salt, c.Nonce)
 		if err != nil {
 			return err