SUMMARY A few tools allow users to manage the secrets available on the system via the secret service D-Bus API, and also have support for managing secrets of Flatpak apps using the secret portal, namely Key Rack (https://flathub.org/apps/app.drey.KeyRack) and oo7-cli (https://github.com/bilelmoussaoui/oo7/tree/main/cli). To support Flatpak apps, two things are needed: access the password used to encrypt the app keyring, and handle the app keyring format. For the former, those tools look into the entries of the secret service for the secret provided to the app by the secret portal. Which means that they need a way to look up those entries by application ID. Currently with the KWallet Framework these secrets do appear in the secret service, however it's not possible to use a secret service API like SearchItems because the application ID is not available as an attribute, it is only available as part of the label of the item. To find a particular item, those tools would need to list all the items of a collection and then ask for the label of each item to check for the application ID, which is inefficient and error prone. Both tools currently support finding an item by using the `app_id` attribute, which is set on secret service items of gnome-keyring and oo7-portal, so it could also be set by the KWallet Framework. STEPS TO REPRODUCE N/A OBSERVED RESULT N/A EXPECTED RESULT N/A SOFTWARE/OS VERSIONS KDE Frameworks Version: 6.16.0 ADDITIONAL INFORMATION
Seems reasonable in principle. Although I'm skeptical how well such tools will work in practice since they would need to make assumptions about how applications store their data