#!/bin/bash

replaceHexKeys() 
{
    local file="$1"

    # Only scan for hex placeholders that actually exist in the file
    local existing_placeholders=$(runCfgOp grep -oE 'RANDOMIZEDHEX[0-9]*' "$file" 2>/dev/null | sort -u)
    
    # \b on the substitution below: `sort -u` orders slots lexically (1, 10, 11,
    # 2), so without it slot 1's pattern matches inside slot 10's placeholder and
    # slots 10+ end up holding slot 1's secret with a digit appended. See
    # password_replace.sh for the full description.
    if [[ -n "$existing_placeholders" ]]; then
        while IFS= read -r placeholder; do
            if [[ -n "$placeholder" ]]; then
                local hex_key
                hex_key=$(openssl rand -hex 32)
                
                runCfgOp sed -i "s/${placeholder}\\b/${hex_key}/g" "$file"
                checkSuccess "Updated ${placeholder} in $(basename "$file") with a new hex key."
            fi
        done <<< "$existing_placeholders"
    fi
}