password is stored in plaintext

[MasseGuillaume]

[ngotchac]

+1 !

I tried to counter this issue in a PR to jira-connector : https://github.com/jenjinstudios/jira-connector/pull/6

The idea would be to use a Cookie Jar File (a simple JSON), so the password is only asked once (BTW, the input should be hidden) and then just a cookie is stored.

[bsergean]

+1 as well. Storing the password in the keychain should be quite easy, I'll see if I can create a pull-request for that. Looks like there's a node package that does this and which is pretty easy to use ->

https://www.npmjs.com/package/keychain

[rcorre]

What about just having a passcmd field in the JSON which executes a shell command to retrieve the password? For example, if you use pass, you could have "passcmd": "pass my-jira-password".