influxdata / influxdata/influxdb

Take a token as secret in a dialog instead of taking it directly as a CLI argument

Open
#24,301 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

__Proposal:__

Prepare new command "influx config set-token" to pass the token in a secret dialog.

__Current behavior:__

It takes the token from CLI argument.

__Desired behavior:__

`influx config set-token` can set a token with a secret dialog.
If `influx config create` is called with `--set-token`, it takes token with a secret dialog.

__Use case:__
CLI options are openly exposed on the shell.
So we have to be careful not to leave tokens in the shell's history, etc.
This is a flaw that cannot be ignored for security reasons.

Contributor guide

Open the contributing guide

Research direction

Start by locating the implementations of `influx config set-token` and `influx config create --set-token`; no file or test is named in the issue. Confirm how each currently receives the token, then verify that the token is entered through a secret dialog and is no longer exposed as a CLI argument.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
cli, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.