app.py: pipe session token via stdin instead of using command args

vlaci / openconnect-sso

Wrapper script for OpenConnect supporting Azure AD (SAMLv2) authentication to Cisco SSL-VPNs

GNU General Public License v3.0

280 stars 119 forks source link

app.py: pipe session token via stdin instead of using command args #66

Closed maximus64 closed 2 years ago

maximus64 commented 2 years ago

Passing session cookie value via the command line isn't safe because any user on the same machine can see this value. Instead of passing it via command args, this change uses --cookie-on-stdin flag and passes the session cookie via stdin.

Signed-off-by: Khoa Hoang admin@khoahoang.com