jiractl icon indicating copy to clipboard operation
jiractl copied to clipboard

Password is stored in plain text on disk

Open basemath opened this issue 6 years ago • 4 comments

The config file saved in {homeDir}/.jiractl/config.json stores the user password in plaintext.

An alternative way to keep the user from having to enter credentials every time could be to use auth tokens like cookies.

basemath avatar May 16 '18 15:05 basemath

@basemath that's a good idea; would you be up for contributing the fix?

ealun avatar May 16 '18 16:05 ealun

@ealun it's possible, but I can't make any commitments/promises right now :)

basemath avatar May 17 '18 15:05 basemath

@ealun I could look into this!

cfellin1 avatar May 29 '18 17:05 cfellin1

@ealun @cfellin1 A good solution might be to use os-provided keychains like git does: https://git-scm.com/book/en/v2/Git-Tools-Credential-Storage

basemath avatar Jun 04 '18 15:06 basemath