Add password generation UI profile workflow

api/server.go

@@ -605,9 +605,9 @@ func (s *Server) GeneratePassword(_ context.Context, req *keepassgov1.GeneratePa
 		return nil, status.Error(codes.FailedPrecondition, "vault is locked")
 	}
 
-	profile, ok := s.profiles[req.GetProfile()]
-	if !ok {
-		return nil, status.Errorf(codes.InvalidArgument, "unknown password profile %q", req.GetProfile())
+	profile, err := passwords.LookupProfile(req.GetProfile(), s.profiles)
+	if err != nil {
+		return nil, status.Error(codes.InvalidArgument, err.Error())
 	}
 
 	password, err := passwords.Generate(profile)

api/server_test.go

@@ -483,6 +483,19 @@ func TestVaultServiceGeneratesPasswordsForAuthorizedClients(t *testing.T) {
 	}
 }
 
+func TestVaultServiceGeneratePasswordRejectsUnknownProfiles(t *testing.T) {
+	t.Parallel()
+
+	client, _, cleanup := newTestClient(t)
+	defer cleanup()
+
+	ctx := metadata.AppendToOutgoingContext(context.Background(), "authorization", "Bearer test-token")
+	_, err := client.GeneratePassword(ctx, &keepassgov1.GeneratePasswordRequest{Profile: "invalid"})
+	if status.Code(err) != codes.InvalidArgument {
+		t.Fatalf("GeneratePassword() code = %v, want %v", status.Code(err), codes.InvalidArgument)
+	}
+}
+
 func TestVaultServiceCopiesEntryFieldsForAuthorizedClients(t *testing.T) {
 	t.Parallel()