Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Master password reprompts not handled correctly #15

Open
samcday opened this issue May 13, 2015 · 1 comment
Open

Master password reprompts not handled correctly #15

samcday opened this issue May 13, 2015 · 1 comment

Comments

@samcday
Copy link

samcday commented May 13, 2015

This might be related to #3.

I couldn't get this workflow to work at first. After a bit of diagnosis, I found lastpass/lastpass-cli#70. Basically, your Lastpass can be configured at the account level, or at the individual site/note level to require a master password reprompt. The kicker is that if your vault contains a single site or secure note that requires reprompt, then every call to lpass export will require the master password, regardless of whether you have an active lpass agent session or not.

You can test this by changing one of your sites to require password reprompt, then run lpass export over and over again - you'll hit the master password prompt every single time.

This totally breaks this Alfred workflow, because the master prompt gets hit when it tries to run the export. In essence, no matter how robust you make the "am I currently logged in?" check (btw - I think checking the sockfile is a good solution), you'll still break in this case.

When you run lpass export, is there any reason why you can't detect the master password prompt (I believe it's output on stderr), and then show an error to the user? As it currently stands, the export that lpdd runs will actually hang indefinitely on the master password prompt.

@cthulu
Copy link

cthulu commented Apr 9, 2016

Facing this issue as well. lpass export requests my master pw as well (some of my logins request the password re-type).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants