docker / docker/docker-credential-helpers
Windows credential helper doesn't support passwords greater than 2,500 characters in length
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 1.3k
- Forks
- 195
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 5
Description
When authenticating Docker with AWS, the recommend practice from AWS is this:
aws ecr get-login-password | docker login --username AWS --password-stdin <registry>
When AWS SSO is enabled, the value returned from get-login-password is greater than 2,500 characters in length, which causes the credential helper to fail. I've tested with both the desktop helper and wincred helper, both of which fail with this message:
Error saving credentials: error storing credentials - err: exit status 1, out: 'The stub received bad data.'
This is a fairly blocking issue for Windows developers, as they cannot log into the Docker registry if the authentication secret is large enough.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the AWS ECR login command on Windows with the desktop and wincred helpers, using a password longer than 2,500 characters. Trace where each helper stores the credential and verify that both can save and retrieve the large secret without the “The stub received bad data” error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100