Skip to content

Authenticate via Username / Password #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
db5rg3ss opened this issue Nov 12, 2020 · 2 comments
Closed

Authenticate via Username / Password #21

db5rg3ss opened this issue Nov 12, 2020 · 2 comments
Labels
enhancement New feature or request wontfix This will not be worked on

Comments

@db5rg3ss
Copy link

It would be nice to be able to authenticate via your npm username and password.

@JamesMessinger JamesMessinger added the enhancement New feature or request label Dec 30, 2020
@JamesMessinger
Copy link
Member

The npm publish command uses your NPM token to authenticate. It does not use your username/password That's why this module needs your NPM token.

It might be possible to have the module run the npm login command and feed your username/password into it via STDIN. However, this would be less secure, since it could potentially expose your NPM credentials. In addition, the npm login command writes your NPM token to the ~/.npmrc file, which is also less secure since any other action can then access the token.

@mcous mcous added the wontfix This will not be worked on label Apr 7, 2023
@mcous
Copy link
Member

mcous commented Apr 7, 2023

Thanks for the request, but I'm going to take the opinionated stance that username/password auth to npm in CI is not a good idea from a security standpoint, and this action should not support it

@mcous mcous closed this as not planned Won't fix, can't repro, duplicate, stale Apr 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request wontfix This will not be worked on
Projects
None yet
Development

No branches or pull requests

4 participants
@mcous @JamesMessinger @db5rg3ss and others