Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there any option to provide password interactively? #8131

Open
raspy opened this issue May 15, 2019 · 4 comments
Open

Is there any option to provide password interactively? #8131

raspy opened this issue May 15, 2019 · 4 comments

Comments

@raspy
Copy link

raspy commented May 15, 2019

When setting password from command line (with 'nuget sources') it is visible on the command line and stored in history. Is there any possibility for nuget to ask for password interactively with echo disabled?

@dquist
Copy link

dquist commented Oct 14, 2019

I think the short answer to this would be 'no'.

Boggles my mind that there's no way to interactively provide the password. This is like command-line authentication 101. Encrypting the password is pointless if it gets entered in plain text and logged in the terminal history.

@raspy
Copy link
Author

raspy commented Oct 14, 2019

But my point was to make NuGet ask for password, not to provide it on the command line. It will not get stored in terminal history this way.
Note that if you call i.e. curl -uraspy it does not contain a password, but curl will ask interactively for password before issuing actual request. That was my point to do the same with nuget.

@dquist
Copy link

dquist commented Oct 14, 2019

I'm agreeing with you! We need a way to enter the password so that it won't be stored in the terminal history.

@jvrobert
Copy link

jvrobert commented Jun 6, 2023

Yeah, this is a pretty big issue. Went to look through history to find a command in clink, and yep, there are my last 4 passwords I've ever used just sitting in plain text, sweet.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

7 participants