Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authenticate 1Password CLI with biometric unlock using user account #119

Merged
merged 11 commits into from
Dec 11, 2023

Conversation

volodymyrZotov
Copy link
Collaborator

@volodymyrZotov volodymyrZotov commented Dec 7, 2023

This PR introduces an additional way to authenticate 1Password CLI with biometric unlock using user account. This is useful when running the terraform commands directly from the machine where 1Password App is installed (aka personal machines).

As this feature uses 1Password CLI users should turn on the app integration in their 1Password app to use it. See this documentation on how to do that.

The benefit of using this over 1Password service account, is that there is no quotas and no such strict rate limits. Read more about 1Password service account quotas and rate limits here.

Authenticate CLI with user account using biometric unlock

To authenticate CLI with user account using biometric unlock:

  1. Turn on the app integration
  2. In the terminal run op account ls to find sign-in address or account ID. It will print similar output in the console:
URL                        EMAIL                                         USER ID
acme.dev.com               test.user@acme.com                            HERE_WILL_BE_REAL_USER_ID
acme.prod.com              prod.user@acme.com                            HERE_WILL_BE_REAL_USER_ID
  1. Set account in the provider configuration with the URL or USER ID value from the previous step.
  2. When the biometric unlock popup appears while running terraform command, authenticate it using fingerprint or password.

Resolves #113

@volodymyrZotov volodymyrZotov changed the title Use user account with biometric unlock to authenticate CLI Authenticate 1Password CLI with biometric unlock using user account Dec 7, 2023
docs/index.md Outdated Show resolved Hide resolved
docs/index.md Outdated Show resolved Hide resolved
docs/index.md Outdated Show resolved Hide resolved
docs/index.md Outdated Show resolved Hide resolved
@jillianwilson
Copy link
Contributor

Code logic looks good, just noted some grammatical errors to fix.

@volodymyrZotov volodymyrZotov force-pushed the feat/biometric-unlock-with-service-accounts branch from b30f6a4 to 0ed3659 Compare December 8, 2023 17:00
To force users to explicitly use one of them in order to be not confused what's actually used when both are set.
'Use with 1Password CLI' section contains the information about retries and how to authenticate CLI with service account or user account
@volodymyrZotov volodymyrZotov merged commit d5367ac into main Dec 11, 2023
4 checks passed
@volodymyrZotov volodymyrZotov deleted the feat/biometric-unlock-with-service-accounts branch December 11, 2023 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Use biometric unlock with Service Accounts.
2 participants