aws-vault icon indicating copy to clipboard operation
aws-vault copied to clipboard

[Feature Request] support osx keyring auth w/o using a macos dialog box

Open jinyius opened this issue 2 years ago • 0 comments

an offshoot of https://github.com/99designs/aws-vault/issues/535

it would be nice if the --prompt=terminal flag would also force any keyring auth to use cli prompts instead of the native keyring dialog box that pops up (without focus i might add, which means i have to move my hands away from the keyboard). this is especially beneficial if you're connected remotely to your machine via ssh.

there is a way to do keyring unlocking using the security command:

security unlock $HOME/Library/Keychains/aws-vault.keychain-db

but unfortunately, this command isn't smart enough to know if the keyring is already unlocked so it always requests for your password even if it's unlocked. also, there's no other security subcommand or other mechanism within macos to figure out if a keyring is already unlocked through the command line afaict.

thanks!

jinyius avatar Dec 21 '22 20:12 jinyius