Skip to content

Read ID & SECRET from files #43

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
thalin opened this issue May 22, 2025 · 1 comment
Open

Read ID & SECRET from files #43

thalin opened this issue May 22, 2025 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@thalin
Copy link

thalin commented May 22, 2025

A standard security practice is to pass secret values in files so that they aren't exposed via /proc and/or ps. It would be great if you could specify --id-file and --secret-file to pass along these values as files instead of directly on the command line.

An additional bonus would be being able to set _FILE environment variables for these as well, to match the existing environment variables from which newt reads secrets now.

@oschwartz10612
Copy link
Member

The id and secret are actually saved in the files at the following locations, depending on your operating system after you do a initial connection with the values. This should be documented better and we should also add a way to control the files so I will leave this open.

macOS: ~/Library/Application Support/newt-client
Windows: %APPDATA%\newt-client
Linux (and others): ~/.config/newt-client

@oschwartz10612 oschwartz10612 self-assigned this May 22, 2025
@oschwartz10612 oschwartz10612 added the enhancement New feature or request label May 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants