Unwanted Dashlane CLI keychain passwords on MacOS about dashlane-cli HOT 6 CLOSED

Hello!

The reason for accessing the OS keychain before the first login is that we didn't want users to go through the whole login process, and at the end get an error, which would force them to start over again from the beginning.

However, it should be possible to postpone the keychain access, save the local key encrypted using the master password in the DB, and display a warning instead of an error if the keychain is unreachable.

What are your opinions?

from dashlane-cli.

Oh ok, I'll have a deeper look then, thanks!

from dashlane-cli.

Hello,
At which step do you stop? There are multiple steps in the authentication process and the local password (stored in the keychain) is required quite early in the process to protect some secrets.

from dashlane-cli.

Hello @Mikescops,

I stopped after entering the mail. In the screenshot the account is test which is not a valid email but it still creates a keychain password in that case.

? Please enter your email address: test
DashlaneApiError: Internal Error
    at requestApi (/snapshot/dashlane-cli-master/dist/requestApi.js:79:23)
    at processTicksAndRejections (node:internal/process/task_queues:96:5)
    at async registerDevice (/snapshot/dashlane-cli-master/dist/middleware/registerDevice.js:15:30)
    at async getSecretsWithoutDB (/snapshot/dashlane-cli-master/dist/crypto/keychainManager.js:81:50)
    at async connectAndPrepare (/snapshot/dashlane-cli-master/dist/database/connectAndPrepare.js:24:21)
    at async Command.<anonymous> (/snapshot/dashlane-cli-master/dist/index.js:34:29)
    at async Command.parseAsync (/snapshot/dashlane-cli-master/node_modules/commander/lib/command.js:917:5) {
  code: 'internal_error',
  type: 'server_error'
}

from dashlane-cli.

Looks good to me!

from dashlane-cli.

This issue should be fixed in next release.

from dashlane-cli.