Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OAuth Refresh Token OR Device Authorisation flow instead - Password replacement #76

Open
udaykor opened this issue Apr 29, 2021 · 1 comment
Labels
enhancement New feature or request

Comments

@udaykor
Copy link

udaykor commented Apr 29, 2021

I would like to avoid using username/password saved as plaintext
I would like to have an authentication token instead of username or password in the yaml file on my machine.

Describe the solution you'd like
Use an Authentication token instead of username/password.

Additional context
It is not a bright idea for anyone to save passwords to local disk - especially if this password & username would give access to real servers running production services. I would like to request for authentication - OIDC/Device Authorisation Flow.

@udaykor udaykor added the enhancement New feature or request label Apr 29, 2021
@ajmyyra
Copy link
Member

ajmyyra commented May 3, 2021

Hi there!

Thank you for the suggestion. While this is more related to UpCloud API and not the client, we don't have a separate public issue board for that so we can let this be here. As I noted in #80, authentication is currently undergoing upgrades so this will be addressed at that point (most likely with OIDC Device Auth flow or OAuth2 Device Auth Grant, not that it makes a difference here), but the work will take some time (months, not weeks). Leaving this open as it's a bit different from 2FA in #80 but related to the same concern.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants