Skip to content

CLI doesn't have config file like olm #42

@jrdemasi

Description

@jrdemasi

Describe the Bug

This is a security issue as the client id and secret are always available in /proc/<pid>/environ or in ps output.

Environment

  • OS Type & Version: (e.g., Ubuntu 22.04) Any Linux distro
  • Pangolin Version: Latest
  • Gerbil Version: Latest
  • Traefik Version: Latest
  • Newt Version: Latest
  • Client Version: (if applicable)

To Reproduce

Run pangolin CLI as per the docs provided (including systemd unit) on site, check ps auxf | grep -i pangolin output

Expected Behavior

If this is going to be used for config on Linux machines, there needs to be a mechanism for passing secrets that doesn't expose on CLI or otherwise

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions