Implement lock mechanism

Dashlane / dashlane-cli

👩‍💻 Dashlane CLI - Access your secrets in your terminal, servers and CI/CD

https://cli.dashlane.com/

Apache License 2.0

189 stars 52 forks source link

Implement lock mechanism #230

Closed Mikescops closed 8 months ago

Mikescops commented 8 months ago

When using the keychains, it's possible to run commands indefinitely unless you lock your keychain. I'm adding a sub-mechanism to drop the key in keychain so it forces to re-ask for the master password on the next command.

For the ones more concerned about using the keychain:

you have a configuration available to not store your master password in the keychain
you can create a cron job or a script that locks your vault at a given period of time or by an action

jboillot commented 8 months ago

In my opinion, these lock mechanisms should rather be managed directly by the keychain, but I understand it is temporarily simpler like that, and easier to find and understand than dcli configure save-master-password false && dcli configure save-master-password true that has the same semantics.