Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use quotes everywhere where passwords are used/generated #390

Closed
LindsayHill opened this issue Feb 13, 2017 · 0 comments
Closed

Use quotes everywhere where passwords are used/generated #390

LindsayHill opened this issue Feb 13, 2017 · 0 comments

Comments

@LindsayHill
Copy link
Contributor

Documentation should make it clear that passwords, etc should be quoted when used/generated via CLI.

This is to avoid issues like this StackStorm/st2#3216 where the intention is to have a password like pas$word.

If a user enters st2 auth user -p pas$word, the shell will expand $word, usually to a blank string. It should be entered as st2 auth user -p 'pas$word'. Similarly when htpasswd is used to generate a password hash.

Locations such as this should include a note on escaping passwords https://docs.stackstorm.com/authentication.html?highlight=st2%20auth#usage, and we should always use single quotes around passwords where we use st2 auth in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant