search

palant / pfp

A simple and secure browser extension to be used with KeePass databases.
https://pfp.works/
Mozilla Public License 2.0
113 stars 14 forks source link

Nextcloud sync support #85

Closed rugk closed 1 year ago

rugk commented 6 years ago

I'd really not trust Dropbox or Google with my passwords, even when encrypted. There is still some meta data, e.g. when one creates passwords.

In any case, it would be nice if you could add NextCloud as a sync option.

palant commented 6 years ago

I looked into it briefly, and it seems that the APIs offered by NextCloud out of the box are WebDav and OCS. According to documentation, both expect authorization to happen either via username:password combination or via a session cookie. Neither would be a good option for PfP. However, it seems that there is an undocumented (!) OAuth2 authorization flow as well. Still no scope limiting from what I can tell, but at least something one can work with.

As to the actual APIs, OCS is the more convenient API but seems to expose auxiliary functionality only. So WebDav it is. It appears that conflict prevention works similarly to Google Drive, meaning sending If-Match: <ETag> header with the request. This isn't properly documented however. I might play around with the demo instance at some point but given the sad state of the documentation this isn't really a priority.

rugk commented 6 years ago

Yeah, AFAIK OAuth2 is quite new.

palant commented 6 years ago

https://github.com/nextcloud/server/pull/4704 - almost a year.

mekineer commented 5 years ago

I had not discovered PFP until someone mentioned it to me. I've been using Keepass2Android, which is able to connect with NextCloud.

pwFoo commented 5 years ago

I use Keeweb which also support different backends and webdav too.

palant commented 5 years ago

Yes, Keeweb fails to account for concurrent uploads, meaning that one device might end up overwriting changes made by another. So I guess that they have the same issues I listed in https://github.com/palant/pfp/issues/85#issuecomment-374531794 but chose to ignore them.

palant commented 1 year ago

PfP 3.0 no longer has sync functionality, sync can be done externally.