From 36e57a479da218462d98a763e2772a96e2d1c9f3 Mon Sep 17 00:00:00 2001
From: Andrew Mayorov <encube.ul@gmail.com>
Date: Tue, 7 Nov 2023 15:55:41 +0700
Subject: [PATCH] feat(mysql): accept wrapped secrets as passwords

---
 apps/emqx_mysql/src/emqx_mysql.erl | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/apps/emqx_mysql/src/emqx_mysql.erl b/apps/emqx_mysql/src/emqx_mysql.erl
index d8b7994ab..37dc3c207 100644
--- a/apps/emqx_mysql/src/emqx_mysql.erl
+++ b/apps/emqx_mysql/src/emqx_mysql.erl
@@ -280,7 +280,10 @@ do_check_prepares(#{prepares := {error, _}} = State) ->
 %% ===================================================================
 
 connect(Options) ->
-    mysql:start_link(Options).
+    %% TODO: teach `tdengine` to accept 0-arity closures as passwords.
+    {value, {password, Secret}, Rest} = lists:keytake(password, 1, Options),
+    NOptions = [{password, emqx_secret:unwrap(Secret)} | Rest],
+    mysql:start_link(NOptions).
 
 init_prepare(State = #{query_templates := Templates}) ->
     case maps:size(Templates) of