doy / rbw

unofficial bitwarden cli
https://git.tozt.net/rbw
Other
611 stars 84 forks source link

Support for Bitwarden API key authentication #72

Closed rousea closed 2 years ago

rousea commented 2 years ago

Bitwarden servers now require captcha responses for all non- API clients. Require the use of the API key to bypass this restriction.

Remove call to /accounts/prelogin as KDF information is returned in the API key login flow.

API scoped authentication does not provide a refresh token and so requires a call to /connect/token/ with the API key id & secret when the access token expires

It may be possible to retrieve the user email via some API call but that capability is unclear as of now.

I'm not sure that this is the best route to take since it is opinionated on requiring the API key, which may not be required.

New to rust, so any pointers/tips welcome.

doy commented 2 years ago

oh, thanks! unfortunately, i just implemented a different fix for this though, but i do appreciate the help.