bitwarden / bitwarden/clients

`bw login --apikey` should not echo client_secret

Open
#11,206 4 comments 1 reaction 0 assignees View on GitHub
bug cli
Dominant language
TypeScript
Stars
13.8k
Forks
2k
Avg merge
3d 9h
Merged PRs (30d)
397

Description

### Steps To Reproduce

```
bw login --apikey
```

### Expected Result

When the client prompts for `client_secret`, the secret is not echoed on the terminal.

### Actual Result

When the client prompts for `client_secret`, the secret is echoed on the terminal.

### Screenshots or Videos

_No response_

### Additional Context

_No response_

### Operating System

macOS

### Operating System Version

_No response_

### Shell

Bash

### Build Version

2024.9.0

### Issue Tracking Info

- [X] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

Contributor guide

Open the contributing guide

Research direction

Start by running `bw login --apikey` and inspect the CLI code that prompts for `client_secret`. Done means the secret is hidden while typing on macOS Bash, with the login flow otherwise unchanged; add or run the relevant CLI prompt test if one is available.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
cli, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.