andreafabrizi / Dropbox-Uploader

Dropbox Uploader is a BASH script which can be used to upload, download, list or delete files from Dropbox, an online file sharing, synchronization and backup service.
https://www.andreafabrizi.it/2016/01/01/Dropbox-Uploader/
GNU General Public License v3.0
6.56k stars 1.08k forks source link

Credentials visible in `ps` #579

Open Elwell opened 1 year ago

Elwell commented 1 year ago

We have a multi-user system and the users' bearer token is visible in plain text using 'ps'

Can you save this into a curl configuration file and call that (so the command line becomes curl -K /tmp/something rather than curl --header "Authorization: Bearer $OAUTH_ACCESS_TOKEN"

This way, the auth token is only visible to that user and not everyone else on the system