Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance Security: Hide Password Input in CLI Login Command #13

Open
SevanBadal opened this issue Dec 10, 2023 · 0 comments · May be fixed by #21
Open

Enhance Security: Hide Password Input in CLI Login Command #13

SevanBadal opened this issue Dec 10, 2023 · 0 comments · May be fixed by #21
Labels
enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed

Comments

@SevanBadal
Copy link
Owner

Currently, the box login and register command requires users to input their email and password in a single line (box login <email> <password>). This approach exposes the password in plaintext, which is a security risk. It can be seen in command line history, process lists, and potentially logs, making it vulnerable to unauthorized access.

Proposed Change:

Refactor the box login command to enhance security:

Change Command Structure: Modify the box login command to only require the email as an initial input (box login <email>).
Prompt for Password: After the email is entered, the CLI should prompt the user to enter their password. This prompt should not echo the password back to the screen to ensure it remains hidden.

@SevanBadal SevanBadal added enhancement New feature or request help wanted Extra attention is needed good first issue Good for newcomers labels Dec 10, 2023
@SevanBadal SevanBadal linked a pull request Dec 15, 2023 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant