Skip to content

without a system keychain, a person cannot sign in #39

Description

@d0ubl3g

Measured

  • crates/hodeishield-cli/src/auth/store.rs:17,100-147: if there is no keychain (desktopless server, WSL or container), login is rejected and the only route is an API key (README.md:116-118).

Why it matters

MSSP users who work from a desktopless jump server: they have to request an API key per tenant instead of using their own identity.

Acceptance criteria

  • There is a documented decision, with its risk analysis, on an optional alternative store.
  • If accepted, it is implemented, with tests and documentation; if not, the README explains the recommended alternative.

Depends on

Nothing.

Activity

  1. changed the title [-]sin llavero del sistema no se puede iniciar sesión como persona[/-] [+]without a system keychain, a person cannot sign in[/+] on Oct 6, 2026
  2. d0ubl3g commented on Oct 11, 2026

    @d0ubl3g
    ContributorAuthor

    The opt-in plain-text token store is in #119. It depends on a change in the service: an absolute limit of 90 days for these sessions from the original sign-in, and ending them when the password is changed. #119 merges after the 0.4.0 release, and the release that carries it ships only once that service change is live, so the README states the final exposure of a copied token file from the first release that has the feature.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions