Clear password cache on hide.

NEWS

@@ -1,6 +1,8 @@
 * Version 2.2.2 (unreleased)
  ** Re-schedule timer each time period based on system time to prevent Qt timer
     drift.
+ ** Clear password memory cache on minimize to prevent accidentally leaving the
+    YubiKey unlocked unattended.
 
 * Version 2.2.1 (released 2015-08-20)
  ** Bugfix release: Fix adding credentials via the UI.

yubioath/gui/__main__.py

@@ -187,6 +187,7 @@ class YubiOathApplication(qt.Application):
         event.accept()
 
     def _on_hide(self, event):
+        self._controller.forget_passwords()
         event.accept()
 
     def _on_closed(self, event):

yubioath/gui/controller.py

@@ -420,3 +420,6 @@ class GuiController(QtCore.QObject, Controller):
             if self.unlock(dev):
                 key = super(GuiController, self).set_password(dev, password)
                 self._keystore.put(dev.id, key, remember)
+
+    def forget_passwords(self):
+        self._keystore.forget()

yubioath/gui/keystore.py

@@ -50,3 +50,6 @@ class Keystore(object):
         if id in self._data:
             del self._data[id]
         self._store.delete(id)
+
+    def forget(self):
+        self._data = {}