From 475a57e3f5e10bcc27421ef5d24fb6387de0d7f7 Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 18 Oct 2024 02:30:54 +0300
Subject: [PATCH] hicli/verify: return error if secret is missing

---
 pkg/hicli/verify.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/hicli/verify.go b/pkg/hicli/verify.go
index 71ce8c1..eea81dd 100644
--- a/pkg/hicli/verify.go
+++ b/pkg/hicli/verify.go
@@ -57,6 +57,8 @@ func (h *HiClient) getAndDecodeSecret(ctx context.Context, secret id.Secret) ([]
 	secretData, err := h.CryptoStore.GetSecret(ctx, secret)
 	if err != nil {
 		return nil, fmt.Errorf("failed to get secret %s: %w", secret, err)
+	} else if secretData == "" {
+		return nil, fmt.Errorf("secret %s not found", secret)
 	}
 	data, err := base64.StdEncoding.DecodeString(secretData)
 	if err != nil {