You are not logged in.

#1 2015-05-23 08:05:08

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

rofi-pass - full-featured frontend to pass

Hello fellow archers. Being a rofi-fan I decided to write a frontend for pass, which I finally migrated to
after keepass kept crashing on me.


Features:

* Auto Type User and Password. Format of password files are expected to be like:

foobarmysecurepassword
UserName: MyUser
URL: http://my.url.foo

* Auto Typing of more than one field. This expects a CustomOrder field in password file:

foobarmysecurepassword
UserName: MyUser
SomeField: foobar
AnotherField: barfoo
URL: http://my.url.foo
CustomOrder: SomeField UserName AnotherField

* Handling webpages, that autotab to next field. For these sites add "NOTAB" in last line of the password file
* Open URLs of entries with hotkey
* Add new Entries to Password Storage
* Edit existing Entries

Code and Screenshots:
https://github.com/carnager/rofi-pass

AUR: https://aur.archlinux.org/packages/rofi-pass-git/

Last edited by Rasi (2015-05-23 08:10:25)


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#2 2015-05-23 09:26:02

chickenPie4tea
Member
Registered: 2012-08-21
Posts: 309

Re: rofi-pass - full-featured frontend to pass

Would like to use it but can never get anything that uses pass as a backend to work for me, I hate gpg keys!


You can like linux without becoming a fanatic!

Offline

#3 2015-05-23 10:26:41

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

"gpg --full-gen-key" to create a key
"pass init email@address.foo" to initlialize pass.

that's it, really


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#4 2015-05-23 12:07:24

chickenPie4tea
Member
Registered: 2012-08-21
Posts: 309

Re: rofi-pass - full-featured frontend to pass

ok then since you were kind enough to offer advice I'll give it one more try, I have read through stuff on it before but it never seems to work for me, just once more then.
edit,gave it last try, no go

Last edited by chickenPie4tea (2015-09-15 07:37:45)


You can like linux without becoming a fanatic!

Offline

#5 2015-05-31 11:15:07

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

New features:

* Copy Username/Password to clipboard
* Add new passwords with optional password generation
* management of passwords (move, delete).


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#6 2015-06-30 13:42:45

Tristelune
Member
Registered: 2007-10-09
Posts: 86

Re: rofi-pass - full-featured frontend to pass

Hello,

thank you very much for your project! I'm really interested to try it, but before I have a few questions:

- I don't use any wm. So I think there will be a problem with xdotool and wmctrl. Is it possible to use your script without xdotool and wmctrl ?
- Would it be possible to make your script compatible with sh ? At the moment I try to write scripts as portable as possible.

Note that I could help you to modify your script. I have written a analog script for myself, but rofi-pass ich much better!

Offline

#7 2015-06-30 15:22:04

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

xdotool should work just fine without a WM, i guess. wmctrl is not used at all.

as for portability. every linux distribution comes with bash. Should be possible to port it to sh, but some name expansions need to be converted to sed/awk/whatever in that case.


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#8 2015-07-07 15:41:49

Tristelune
Member
Registered: 2007-10-09
Posts: 86

Re: rofi-pass - full-featured frontend to pass

Thank you for your answer. I have tested it and it works without wmctrl.

I have some questions:

- A list of shortcuts is displayed in the window, but some shortcuts are not displayed entirely. For
example I read : "Alt+Shift+c..." and I don't know what it is. Is it so by design ? I have seen we can read all the shortcuts in
the file /etc/rofi-pass.conf
- Usually after the login is entered it's enough to press "Tab" and "Enter" to be logged in. With autotype "Tab" and "Enter" are not added after the username
and the password are written. I don't know if it can be a problem with some websites. I would add it. What do you think ?

Offline

#9 2015-07-07 15:47:42

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

regarding shortcuts:

        HELP="<span color='$help_color'>${autotype}: Autotype | ${type_user}: Type User     | ${type_pass}: Type Password
${open_url}: Open URL | ${copy_name}: Copy Username | ${copy_pass}: Copy Password</span>"

should display this...

I don't understand the second question. default sequence is USER, TAB, PASSWORD. i have never seen that fail yet.
What site is this happening on?
also you can force tabbing by creating an empty tab: field and using that in CustomOrder:

password
---
UserName: user
tab:
CustomOrder: UserName tab

regarding Enter: rofi-pass will never hit the enter key to reduce danger of pasting into wrong windows


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#10 2015-07-07 20:15:43

Tristelune
Member
Registered: 2007-10-09
Posts: 86

Re: rofi-pass - full-featured frontend to pass

Thank you for the shortcuts!

No, at the moment rofi-pass doesn't fail on a website. It would just be an enhancement. I would like that rofi-pass hit the enter key at the end. I see
the problem and after using rofi-pass I discovered another one with the archlinux.org forums: after the login has been entered, tab must be hit two times, not
only once. With your comment I could use CustomOrder. I also use the archlinux.fr forums and there I have to hit tab three times. Again, CustomOrder
would help to hit tab three times.

Now the enter key is missing. I understand the risk. But I use some logins very often and the web interface doesn't change very often. So each time
I have to hit the same keys, so I know when I can hit enter. The default of rofi-pass would remain to not hit enter. But what about an optional parameter
which would cause the enter key to be hit ? I mean: I test rofi-pass with the web interface and after I could securely automate the whole login. Perhaps
rofi-pass could be invoked with a parameter (for example rofi-pass --enter) or a parameter like CustomOrder could be introduced. So by default it is secure
and after testing the user can choose. It would be great!

Offline

#11 2015-07-08 00:00:58

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

i dont understand the issue. you dont have to hit tab at all to press the enter key.
example arch forums: select user field. run rofi-pass, select arch forum entry, hit enter. hit enter again > logged in.

see:
https://fb.53280.de/tuZU1/

Last edited by Rasi (2015-07-08 15:58:21)


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#12 2015-07-08 15:56:23

paris3200
Member
Registered: 2012-12-08
Posts: 22

Re: rofi-pass - full-featured frontend to pass

This looks interesting.  How would you go about making it work with other browsers such as qutebrowser?

Offline

#13 2015-07-08 15:57:43

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

rofi-pass is browser independent. actually its independent of any application. i also use it to fill my password for git in terminal.

Last edited by Rasi (2015-07-08 15:58:13)


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#14 2015-07-08 17:45:53

paris3200
Member
Registered: 2012-12-08
Posts: 22

Re: rofi-pass - full-featured frontend to pass

Thank you for clarifying.  I figured out what I was doing wrong.  I just assumed it was a browser problem.

Offline

#15 2015-07-08 19:52:28

Tristelune
Member
Registered: 2007-10-09
Posts: 86

Re: rofi-pass - full-featured frontend to pass

Rasi wrote:

example arch forums: select user field. run rofi-pass, select arch forum entry, hit enter. hit enter again > logged in.

Ok, I want the following: select user field. run rofi-pass, select arch forum entry, hit enter. > logged in.

In order to do what I want rofi-pass has to simulate a key press of "enter", otherwise it won't work. But I agree it must
not be the default behavior. I would like to have that feature, for example with a parameter I can give to rofi-pass.

Offline

#16 2015-07-09 00:21:06

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

Tristelune wrote:
Rasi wrote:

example arch forums: select user field. run rofi-pass, select arch forum entry, hit enter. hit enter again > logged in.

Ok, I want the following: select user field. run rofi-pass, select arch forum entry, hit enter. > logged in.

In order to do what I want rofi-pass has to simulate a key press of "enter", otherwise it won't work. But I agree it must
not be the default behavior. I would like to have that feature, for example with a parameter I can give to rofi-pass.

I added "auto_enter" option to config file. By using this you must make extra sure to always have the correct window active. You don't want to type your passwords in e.g. IRC.

Last edited by Rasi (2015-07-09 01:26:02)


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#17 2015-07-09 21:22:10

Tristelune
Member
Registered: 2007-10-09
Posts: 86

Re: rofi-pass - full-featured frontend to pass

Thank you very much! I'll check that enter is hit on the correct window.

On github, the option in config.example is:

auto_enter="'true'

I think you should correct it to

auto_enter='true'

unless your goal was to disable it, but In that case I would have expect that the whole line is a comment and begin with #.

Offline

#18 2015-07-10 15:10:17

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

thanks... fixed


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#19 2015-07-14 11:02:19

d72
Member
Registered: 2013-07-06
Posts: 8

Re: rofi-pass - full-featured frontend to pass

I currently use the passff Firefox plugin which has a "Goto, fill and submit" option, is it possible to implement that in rofi-pass rather than having to go to the URL and click in the username field?

Also, when I open rofi-pass I get a "Choose Database" prompt and any of my gpg files which aren't stored in folders (just in the root of ~/.password-store) aren't visible, if I hit ESC I get the "rofi-pass > " prompt and I can see these unfoldered(?) pass entries. Is there a way of getting the "rofi-pass >" prompt without having to press ESC?

Offline

#20 2015-07-14 13:53:53

Rasi
Member
From: Germany
Registered: 2007-08-14
Posts: 1,914
Website

Re: rofi-pass - full-featured frontend to pass

rofi-pass --root "."

*EDIT*
I just commited a change to git. running rofi-pass without the --root argument should work perfectly without any subfolders now.

As for "go to, fill and submit". No this is not possible. I can go to a webpage and also try to fill the details. But it's impossible to make sure it's filled in the correct input fields

Last edited by Rasi (2015-07-14 19:00:05)


He hoped and prayed that there wasn't an afterlife. Then he realized there was a contradiction involved here and merely hoped that there wasn't an afterlife.

Douglas Adams

Offline

#21 2015-07-16 06:45:13

d72
Member
Registered: 2013-07-06
Posts: 8

Re: rofi-pass - full-featured frontend to pass

Thanks, that works and makes things quicker to access smile

Offline

Board footer

Powered by FluxBB