codecentric / gopass-ui Goto Github PK
View Code? Open in Web Editor NEWgopass CLI + UI = visual cross-platform password manager for teams
License: MIT License
gopass CLI + UI = visual cross-platform password manager for teams
License: MIT License
gopass is configured and working on commandline. After installing following the instructions, gopass-ui doesn't start:
gopass-ui
[2682:0710/084341.870175:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /opt/Gopass UI/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap
When setting the mode with:
chmod 4755 /opt/Gopass UI/chrome-sandbox
it still doesn't start:
gopass-ui
Trace/breakpoint trap
When I create a new store item with
$ gopass create
the label with the passwort shows something like this:
m.y.s.e.c.r.e.t.p.a.s.s.w.d.comment: url: github.comusername: [email protected]
Ideas for later: In the settings, a RegEx should be configurable that determines if a secrets' path yields a password. The default value should simply detect a password if "password" is included in the secrets' path.
A already working blueprint with travis ci integration can be found here:
https://github.com/codecentric/merge-request-notifier
On OSX, the trend in menu bar icons is monochrome.
code to support dark and light mode:
const getTrayImage = () => {
const icon = nativeTheme.shouldUseDarkColors ? 'icon-dark-mode.png' : 'icon.png'
return path.join(__dirname, 'assets', icon)
}
Currently we always create a new window when the user clicks on the tray menu and selects on of the apps.
This needs to be fixed.
have a look here: https://www.electron.build/auto-update
The shortcut to open the global search window is cmd + shift + p
. It should be configurable. The setting should be persistent.
Mac OS 10.14
gopass CLI correctly encrypts & decrypts using my Encryption subkey, but gopass-UI seizes upon the master key, which was "removed" during GPG key creation. Here listed are my keys:
sec# rsa4096 2020-05-16 [C]
B632FAE4E38007F7E0EAC765977BFD885398E03D
uid [ultimate] Rexford Gibbs [email protected]
uid [ultimate] RJ Gibbs [email protected]
ssb rsa4096 2020-05-16 [S]
ssb rsa4096 2020-05-16 [E]
ssb rsa4096 2020-05-16 [A]
The hash char (#) after the first key, sec#, indicates that the master key is offline.
Can gopass-UI be configured to use the encryption subkey ssb rsa4096 2020-05-16 [E]?
Thanks.
Rexford Gibbs
The history of a secret can become very long since onboarding new team members results in removing and re-adding participants, technically. A simple pagination with configureable page size is useful.
Thanks for 0.60, it's fixed the issue #31 in Mojave and Catalina.
The following feature would be great though:
In the explorer, have the passwords hidden by default, with one extra button like this:
[COPY TO CLIPBOARD] [SHOW] [EDIT] [DELETE]
On OSX, the trend in menu bar icons is monochrome. Can we get a menu bar icon to match the dark or light themes of OSX?
If Gopass finds no secrets containing passwords, the resulting status finishes successful but contains no results as nothing was to be rated.
In this case it should be displayed that nothing was available for analysis.
Thanks for the 0.70 update! awesome work.
Creating a new issue to further discuss this closed issue
Bummer about the app switcher hiding thing #43
Would it be possible to make it optional, so those that want to hide that app can hide it?
I use Command-Shift-P when I need to search for a password, not the app switcher, I like to keep the app-switcher with the fewest amount of apps possible.
Regarding the dock, I don't keep the app in the dock as i have set it to start up when i log in :)
Then i do Command-Shift-P when i need a password, start typing the path, then hit enter to copy the password to the clipboard. Very efficient.
A nice feature would be if it is also possible to have "file" operation support, as that would greatly enhance the usability (and which is cumbersome on the console) eg:
(edit typo)
found 10 vulnerabilities (9 moderate, 1 high)
Show the outputs of gopass config
in a section of the settings screen
Currently the left sidebar navigation has a fixed width. The content area on the right side will occupy the rest of the window width. Problem: on smaller devices, screens with low resolution or devices on which accessibility helper tools are used so a very high zoom factor is used, the content part becomes very small (if not even invisible).
Solution: Use automatic layouting using native power of CSS, e.g. flexbox or native CSS grid layout.
So we have deployed our gopass repository to github. I tried using the Gopass UI and updated the store. But couldn't sync it with github.
Start Gopass UI
Close Explorer window
Start Explorer window from the Gopass UI toolbar and you get.
Uncaught Exception:
Error: Object has been destroyed
at click (/Applications/Gopass UI.app/Contents/Resources/app.asar/dist/main.js:42:3322)
at MenuItem.click (/Applications/Gopass UI.app/Contents/Resources/electron.asar/browser/api/menu-item.js:56:9)
at Function.executeCommand (/Applications/Gopass UI.app/Contents/Resources/electron.asar/browser/api/menu.js:31:13)
In addition, search window will allow searching, but clicking on a password path does nothing.
Currently a click on the sync button will only execute gopass sync
without an effect on the UI. Since the store could have been changed by remote, the tree navigation shall be updated.
State containing tree navigation and secret names does currently sit in the top component of the application within the React component state. It is already passed down to other components. Doing it in the same matter (passing it down) would require it to be passed another additional way down, which would be very ugly.
It should be extracted into a context so that the context can be used throughout all components in the hierarchy.
A new screen shall offer everything related to recipient management like documented from Gopass: https://github.com/gopasspw/gopass/blob/master/docs/features.md#managing-recipients
gopass recipients
)gopass recipients update
)gopass add
or gopass authorize
)gopass remove|rm|deauthorize
)BUG:
By clicking on "EDIT" Button - then click on any other entry in the stores tree = the input stays in edit mode with the information of the last active entry but shows the new clicked entrys name. This is confusing and leads to input mistakes from a ux perspective.
EXPECTED BEHAVIOUR:
Modal which askes if i want to cancel the operation or to save it on leaving this view.
OR
If there have been no changes simple quit the edit mode.
Thanks in advance.
Integrating all commands related to management of mounts which refers to directories that Gopass manages as stores. One should be able to:
It's not working yet but should not be that much effort. It could also use some basic security and dependency checks.
The password health should only be reviewed once per application usage.
For secrets which are detected as passwords, a strength indicator should show how good a password is. The following rules seem to be a good starting point:
Enhanced ones, can be covered on a later point of time:
AAAAAb!1
qWertz123!
)(inspired by https://stackoverflow.com/a/2075027/5500928)
The password-creation dialog is currently rather crude in that one needs to write the complete path into the "secret name"-field. Even the cli with its completion features is much better there.
Seeing the store with the tree in the lefthand-side, I would expect to be able to see which item in the tree is currently active.
Then when clicking the plus-Icon, at least the "secret name"-field should be pre-filled with what is selected on the lefthand-side.
Even better, right-clicking in the tree could have a context-menu that allows (possibly among other things) for creation of new items, it being subfolders in the tree or passwords.
Currently alerts are just displayed or not. The user experience could be improved by a simple and smooth animation.
It would be great to add a new menu entry to switch into some "testdata" mode. So it's easy to take screenshots without any production gopass store.
One solution could be:
?test-data=1
when the "test-data"-mode is active.const url = new URL(document.location.href)
const SHOW_TEST_DATA = url.searchParams.has('test-data')
With QtPass it is possible to edit/retrieve multiline content. This does not seem to be possible with the current version of Gopass UI (0.4.0). It would be nice to have this feature also in the Gopass UI!
when safecontent
is enabled, the password shown is No safe content to display, you can force display with show -f.Copying password instead.โ Copied XXX to clipboard. Will clear in 45 seconds.
and the edit button shows the exact same text.
Hello all,
the latest version doesn't have a deb file.
Can you please provide that?
As this is an application that I launch at boot and is running constantly in the background, it would be nice to be able to remove it from the Dock in OSX when it is running, as we can access from the Task Bar icon. All the gopass-ui settings are accessed through the UI.
This would further streamline this excellent tool.
Ubuntu 18.04, all updates installed
gopass configured and working on command line, environment test of gopass-ui says "Everything looks fine"
using local password store
Workaround is to restart the gui every time a password was added or deleted, then the updated tree is displayed correctly
Hi, I use arch btw.
Like this project a lot and converted the .deb package with debtap to a pacman (arch linux package manager) compatible tar.gz file.
Would be awesome to have such a package also released for fellow arch linux users which loves gopass and also want to use your gopass-ui right away.
I don't know about the process to get into the AUR (arch user repository) - but providing a package here in github is good enough.
Thank you
Steven
This adds functionality on top of managing only mounts. In addition one shall be able to init stores and clone existing stores from Git repositories.
The other part related to this would be cloning existing (from Git repository) and initialising new password stores from the UI. Features to add to the UI:
gopass init <gpg-key-reference> --path <path> --store <name>
)gopass clone [email protected]/pass-work.git work
) to init the store in a non-default directory (e.g. $HOME/.password-store-work
)A short GIF could show better how gopass-ui is used and what features it supports.
Macbook Pro Mojave 10.14.6
Environment Test Fails
Oops, something went wrong!
It wasn't possible to decrypt your secrets.
gopass init
and selected a private key for encrypting secrets.gopass insert personal/email-pw
When having Chars like "(", ")" or Backtick inside the file or password gopass-ui is not able to save or access the file because of sh errors as those Chars are not escaped and are valid sh syntax.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.