Skip to content
This repository has been archived by the owner on Dec 14, 2024. It is now read-only.

Can the password be moved to a separate file? #53

Closed
user202729 opened this issue Dec 6, 2019 · 11 comments
Closed

Can the password be moved to a separate file? #53

user202729 opened this issue Dec 6, 2019 · 11 comments

Comments

@user202729
Copy link
Contributor

I'm thinking about using git to store my configuration files online, however from my reading of the source code, given a .cfconfig file it's possible to get the plain text password.

Is it possible to move the password to a separate file (for example .cfcredential)? For reference, git supports storing password indefinitely, but the password is stored (in plain text) in the ~/.git-credentials file.

@xalanq
Copy link
Owner

xalanq commented Feb 27, 2020

Good idea~

@xalanq
Copy link
Owner

xalanq commented Feb 27, 2020

I'll store them in ~/.cfsession

@xalanq
Copy link
Owner

xalanq commented Feb 27, 2020

Because I think the cookies are important credentials too

@user202729
Copy link
Contributor Author

Note that changing the config file path means:

  • The password will still be stored in the old .cfconfig file (user would need to manually delete it.
  • The user would need to reconfigure the templates(they could simply copy it from the old config file, but only if they know about it.)

@xalanq
Copy link
Owner

xalanq commented Feb 28, 2020

Note that changing the config file path means:

  • The password will still be stored in the old .cfconfig file (user would need to manually delete it.
  • The user would need to reconfigure the templates(they could simply copy it from the old config file, but only if they know about it.)

If the user re-login, the configuration file will be updated.

@xalanq
Copy link
Owner

xalanq commented Feb 28, 2020

BTW, in the latest version (>0.9.0), the configuration file will be updated every time while user using the cf .

@user202729
Copy link
Contributor Author

If the user re-login, the configuration file will be updated.

What about the templates?...

@xalanq
Copy link
Owner

xalanq commented Feb 28, 2020

If the user re-login, the configuration file will be updated.

What about the templates?...

Sorry, I just checked the code (v0.9.0). It had the feature above.
I meant if the user just move ~/.cfconfig to ~/.cf/config, in the next run of the cf, the redundant information will be deleted. So the username and password will be deleted and the other things will be kept.

@user202729
Copy link
Contributor Author

Okay. But users who don't know about that file will not be able to do that. The program should inform the user, or automatically move the file if the source is present and not the target..

@xalanq
Copy link
Owner

xalanq commented Feb 28, 2020

Well, the upgrade command does not support too many functions. I have updated the release notes. Thanks a lot!

@xalanq
Copy link
Owner

xalanq commented Feb 28, 2020

That's why I added an Attention in the release note. I have no way to do that better. Sorry~

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants