Feature request: Support UAC-less / commandline authentication
Open
Nobody has claimed this yet.
Issue-Feature
- Dominant language
- Rust
- Stars
- 5.9k
- Forks
- 180
- Avg merge
- 1d 7h
- Merged PRs (30d)
- 2
Description
Users should be able to enter their password at the command line, without a UAC prompt, to elevate their privileges.
Requested by: PowerShell / OpenSSH team, and everyone who's ever used sudo on Linux
Potential issues
Literally any malicious.exe out there can AttachConsole to a sudo process, PeekConsoleInput, and steal the password.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by tracing the command-line invocation and UAC elevation path, then investigate how console input can be exposed through AttachConsole and PeekConsoleInput. Done should provide a supported command-line authentication flow while addressing the password-theft risk described in the issue.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- authentication, cli, operating-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100