wallabag / wallabag/android-app

feature: setup without password / api-only client

Open
#788 1 comment 3 reactions 0 assignees View on GitHub
Improvement
Dominant language
Java
Stars
587
Forks
276
PR merge metrics
No merged PRs in 30d

Description

# Issue details

### Duplicate?
Have you searched the issues of this repository if your issue is already known? yes

### Actual behaviour
when setting up the app, I have to provide username + password.
Apparently the app then creates an API client (with a generic name -- btw this could at least include a timestamp so to identify it on the website), and stores the credentials. I suppose this is then used instead of the original password to do all requests.

### Expected behaviour
If trust in the device is not that big (and/or just to minimize attack vectors), it would be useful to setup the app with extra login credentials, specific to this client.
If my assumption above is right, then allowing to operate with the API client ID+secret only, without username+password, would implement exactly this

# Environment details
- **wallabag app version**: 2.2.1
- **wallabag app installation source** F-Droid
- **Android OS version**: 9
- **Android ROM** LineageOS
- **wallabag server version**: 2.3.1
- **Do you have Two-Factor-Authentication enabled?**: no

# Your experience with wallabag Android app
Have you had any luck using wallabag Android app before?

Yes, works great!

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.