38
CLI for codeberg/forgejo? (lemmy.world)
submitted 8 months ago by to c/programming@programming.dev
12 comments fedilink hide all child comments
 

I'm looking for a forgejo cli (something similar to gh for github or glab for gitlab - neither of which I've ever used).

I found one named forgejo-cli and another named fgj but, from a quick look at the source, both seem to save my API key in a plaintext file, which... I just find unacceptable (and, frankly, quite dumb).

Do you know of any others?

you are viewing a single comment's thread
view the rest of the comments
[–] 12 points 8 months ago (1 child)

Keeping tokens in plaintext on the client is really common. The alternative would require the user to enter a decryption password on every system start, like some wallets do, which is a bit of a hassle. If at least there was "one obvious way of doing this" across platforms, that'd make things better, but in reality, some tools can't even put their configs and cache in a sensible location.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] [S] 2 points 8 months ago

    The alternative would require the user to enter a decryption password on every system start, like some wallets do, which is a bit of a hassle.

    The downside is that you need to type a password - the upside is that you don't need to type any extra password, since you are already unlocking whatever wallet you are using anyway (unless you don't use one - which is a whole different problem on its own).

    If at least there was “one obvious way of doing this” across platforms,

    For wallets I found https://github.com/hrantzsch/keychain/, but TBH I don't think OS password managers would be the way to go here (at least not if you want to support CI systems and building in containers). Something based on age would be far more flexible, and could leverage existing ssh keys (which I'm sure some people store with no password protection - which, again, is a whole different problem on its own).

  • permalink
  • fedilink
  • source
  • parent