influxdata / influxdata/influxdb
Take a token as secret in a dialog instead of taking it directly as a CLI argument
- Dominant language
- Rust
- Stars
- 31.7k
- Forks
- 3.7k
- Avg merge
- 13h 37m
- Merged PRs (30d)
- 8
Description
__Proposal:__
Prepare new command "influx config set-token" to pass the token in a secret dialog.
__Current behavior:__
It takes the token from CLI argument.
__Desired behavior:__
`influx config set-token` can set a token with a secret dialog.
If `influx config create` is called with `--set-token`, it takes token with a secret dialog.
__Use case:__
CLI options are openly exposed on the shell.
So we have to be careful not to leave tokens in the shell's history, etc.
This is a flaw that cannot be ignored for security reasons.
Contributor guide
Research direction
Start by locating the implementations of `influx config set-token` and `influx config create --set-token`; no file or test is named in the issue. Confirm how each currently receives the token, then verify that the token is entered through a secret dialog and is no longer exposed as a CLI argument.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100