age-plugin-yubikey
age-plugin-yubikey copied to clipboard
str4d
Enable providing YubiKey PIN via environment variable
In programmatic use cases, the GUI or TUI used by pinentry (or the fallback interactive prompt) won't work. Instead, if the environment variable AGE_YUBIKEY_PIN is set, we should just use that as the PIN and never prompt for one.
There is a potential issue here in that if we don't have sufficiently-clear error messages, a user with an accidentally-configured environment might block their PIN while trying to get their script to work. We should make sure that we both log the fact that an environment variable is being used, and include that in any PIN-related errors.
