summaryrefslogtreecommitdiff
path: root/.gitignore%252525252525252525252525253fid%252525252525252525252525253dc886398...
diff options
context:
space:
mode:
authorRyan Lue <hello@ryanlue.com>2022-06-30 23:04:35 -0700
committerLukas Fleischer <lfleischer@calcurse.org>2023-04-11 15:22:03 -0400
commite772c4b6d52627c463e70b4284e3794aa0bd0634 (patch)
treeea1962c737cac208ab8c8b034bde22b8cc3e32d1 /.gitignore%252525252525252525252525253fid%252525252525252525252525253dc886398beec480bf3035b654aa01e3ec7ce8ddfc%2525252525252525252525253fid%2525252525252525252525253dc886398beec480bf3035b654aa01e3ec7ce8ddfc&id2%2525252525252525252525253db0d94d4e840b0a95a16b3f4740c42d92cabb194b%25252525252525252525253fid%25252525252525252525253dc886398beec480bf3035b654aa01e3ec7ce8ddfc%252525252525252525253fid%252525252525252525253db0d94d4e840b0a95a16b3f4740c42d92cabb194b%2525252525252525253fid%2525252525252525253db8b7a3a7348417256885b4d7fe9d7967ba00a95c%25252525252525253fid%25252525252525253dea9a98ca5d2520f1fa32f02e88ebde865c44a13d%252525252525253fid%252525252525253d1c5eb9f962e97a3f23dc0f1df0408e67b078bb14%2525252525253fid%2525252525253d213e5f86a54a31101c66de60114e0cbb52dea7a7%25252525253fid%25252525253d98ff4dbacbdb37f811581ea3db09d64227f391a9%252525253fid%252525253d5394e981d9b5c25211c9c501af99a34af0c46f71%2525253fid%2525253d5394e981d9b5c25211c9c501af99a34af0c46f71%25253fid%25253d5394e981d9b5c25211c9c501af99a34af0c46f71%253fid%253de772c4b6d52627c463e70b4284e3794aa0bd0634%3fid%3de772c4b6d52627c463e70b4284e3794aa0bd0634?id=e772c4b6d52627c463e70b4284e3794aa0bd0634
parent4cd300f2c408907b4a576b55fc15479afbd5d81f (diff)
calcurse-caldav: Support PasswordCommand option
This commit adds a new `Auth/PasswordCommand` option to support security best practices re: handling secrets in CLI program configuration. Prior to this commit, the two available options for specifying a password were: 1. via the `Auth/Password` config parameter, or 2. via a `$CALCURSE_CALDAV_PASSWORD` environment variable. The former is unsafe for obvious reasons; the latter is unsafe because as long as the script is running, its environment can be accessed via $ cat /proc/<pid>/environ and is thus visible to anyone with access to the system. This commit preserves preexisting behavior (for backward compatibility) but removes all mention of option 2 from the README. Since the README example for option 2 used a password command anyway, there is little reason to continue its use, and this commit recommends it be deprecated. Signed-off-by: Lukas Fleischer <lfleischer@calcurse.org>
Diffstat (limited to '.gitignore%252525252525252525252525253fid%252525252525252525252525253dc886398beec480bf3035b654aa01e3ec7ce8ddfc%2525252525252525252525253fid%2525252525252525252525253dc886398beec480bf3035b654aa01e3ec7ce8ddfc&id2%2525252525252525252525253db0d94d4e840b0a95a16b3f4740c42d92cabb194b%25252525252525252525253fid%25252525252525252525253dc886398beec480bf3035b654aa01e3ec7ce8ddfc%252525252525252525253fid%252525252525252525253db0d94d4e840b0a95a16b3f4740c42d92cabb194b%2525252525252525253fid%2525252525252525253db8b7a3a7348417256885b4d7fe9d7967ba00a95c%25252525252525253fid%25252525252525253dea9a98ca5d2520f1fa32f02e88ebde865c44a13d%252525252525253fid%252525252525253d1c5eb9f962e97a3f23dc0f1df0408e67b078bb14%2525252525253fid%2525252525253d213e5f86a54a31101c66de60114e0cbb52dea7a7%25252525253fid%25252525253d98ff4dbacbdb37f811581ea3db09d64227f391a9%252525253fid%252525253d5394e981d9b5c25211c9c501af99a34af0c46f71%2525253fid%2525253d5394e981d9b5c25211c9c501af99a34af0c46f71%25253fid%25253d5394e981d9b5c25211c9c501af99a34af0c46f71%253fid%253de772c4b6d52627c463e70b4284e3794aa0bd0634%3fid%3de772c4b6d52627c463e70b4284e3794aa0bd0634?id=e772c4b6d52627c463e70b4284e3794aa0bd0634')
0 files changed, 0 insertions, 0 deletions