2017-01-08 16:24:03 +00:00
|
|
|
package obscure
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
|
2020-07-31 02:32:28 +00:00
|
|
|
"io/ioutil"
|
|
|
|
"os"
|
|
|
|
|
2019-07-28 17:47:38 +00:00
|
|
|
"github.com/rclone/rclone/cmd"
|
|
|
|
"github.com/rclone/rclone/fs/config/obscure"
|
2017-01-08 16:24:03 +00:00
|
|
|
"github.com/spf13/cobra"
|
|
|
|
)
|
|
|
|
|
|
|
|
func init() {
|
2019-10-11 15:58:11 +00:00
|
|
|
cmd.Root.AddCommand(commandDefinition)
|
2017-01-08 16:24:03 +00:00
|
|
|
}
|
|
|
|
|
2019-10-11 15:58:11 +00:00
|
|
|
var commandDefinition = &cobra.Command{
|
2017-01-08 16:24:03 +00:00
|
|
|
Use: "obscure password",
|
2020-09-03 12:12:54 +00:00
|
|
|
Short: `Obscure password for use in the rclone config file.`,
|
2020-06-05 11:48:28 +00:00
|
|
|
Long: `In the rclone config file, human readable passwords are
|
|
|
|
obscured. Obscuring them is done by encrypting them and writing them
|
|
|
|
out in base64. This is **not** a secure way of encrypting these
|
|
|
|
passwords as rclone can decrypt them - it is to prevent "eyedropping"
|
|
|
|
- namely someone seeing a password in the rclone config file by
|
|
|
|
accident.
|
|
|
|
|
|
|
|
Many equally important things (like access tokens) are not obscured in
|
|
|
|
the config file. However it is very hard to shoulder surf a 64
|
|
|
|
character hex token.
|
|
|
|
|
2020-07-31 02:32:28 +00:00
|
|
|
This command can also accept a password through STDIN instead of an
|
|
|
|
argument by passing a hyphen as an argument. Example:
|
|
|
|
|
|
|
|
echo "secretpassword" | rclone obscure -
|
|
|
|
|
|
|
|
If there is no data on STDIN to read, rclone obscure will default to
|
|
|
|
obfuscating the hyphen itself.
|
|
|
|
|
2020-06-05 11:48:28 +00:00
|
|
|
If you want to encrypt the config file then please use config file
|
|
|
|
encryption - see [rclone config](/commands/rclone_config/) for more
|
|
|
|
info.`,
|
2017-01-08 16:24:03 +00:00
|
|
|
Run: func(command *cobra.Command, args []string) {
|
|
|
|
cmd.CheckArgs(1, 1, command, args)
|
2020-07-31 02:32:28 +00:00
|
|
|
var password string
|
|
|
|
fi, _ := os.Stdin.Stat()
|
|
|
|
if args[0] == "-" && (fi.Mode()&os.ModeCharDevice) == 0 {
|
|
|
|
bytes, _ := ioutil.ReadAll(os.Stdin)
|
|
|
|
password = string(bytes)
|
|
|
|
} else {
|
|
|
|
password = args[0]
|
|
|
|
}
|
2017-01-08 16:24:03 +00:00
|
|
|
cmd.Run(false, false, command, func() error {
|
2020-07-31 02:32:28 +00:00
|
|
|
obscured := obscure.MustObscure(password)
|
2018-01-18 20:19:55 +00:00
|
|
|
fmt.Println(obscured)
|
2017-01-08 16:24:03 +00:00
|
|
|
return nil
|
|
|
|
})
|
|
|
|
},
|
|
|
|
}
|