Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UX: Possibility to prompt when touch is required? #154

Open
VlkrS opened this issue Aug 29, 2023 · 9 comments
Open

UX: Possibility to prompt when touch is required? #154

VlkrS opened this issue Aug 29, 2023 · 9 comments

Comments

@VlkrS
Copy link
Contributor

VlkrS commented Aug 29, 2023

What were you trying to do

I'm happily using age-plugin-yubikey, but I find that there are occasions when the lack of a prompt when touch is required is confusing, because it appears that the program just "hangs".
Is it possible to add an optional prompt saying "Please touch your yubikey" or somesuch?

@supermarin
Copy link

It gets printed to the console. I'm assuming you'd want a UI notification in the same fashion as yubikey-agent?

@str4d
Copy link
Owner

str4d commented Nov 16, 2023

age-plugin-yubikey used to always send a message to touch the YubiKey, but in testing it became quickly apparent that if you had "always require touch" configured for an identity, and needed to decrypt a bunch of files in a row, the notification was incredibly noisy. We now only send that message if we've been waiting for at least 10 seconds.

If you're not seeing any message at all, even after waiting, that suggests a different problem. Can you confirm whether or not you're seeing the delayed message?

@str4d
Copy link
Owner

str4d commented Nov 16, 2023

I went back and checked the details of this change, and I'd forgotten that the way we did it was that the message was removed completely from age-plugin-yubikey, and moved into clients (which have the necessary context to implement the more forgiving approach): #64

So the issue here is probably that the age client you are using does not implement the "waiting on X plugin" notification.

@Amolith
Copy link

Amolith commented Dec 5, 2023

the age client you are using does not implement the "waiting on X plugin" notification

I'm pretty new to the age ecosystem and am using the original age. All it does is print a message to the console, which isn't great when it's used in scripts. Ideally, I'd like a GUI popup for PIN prompts and a notification for touch prompts. Is there a way to do that with age or would I need to use a different client, like your rage?

@eterps
Copy link

eterps commented Dec 6, 2023

I have the same problem (also pretty new to the age ecosystem), the console-only UX is really confusing when using a console email client (like aerc).

@str4d
Copy link
Owner

str4d commented Jan 22, 2024

Ideally, I'd like a GUI popup for PIN prompts and a notification for touch prompts. Is there a way to do that with age or would I need to use a different client, like your rage?

You would need to use a client that implements that feature. My rage client does: it uses pinentry binary if available to do a GUI popup, falling back to CLI.

@eterps
Copy link

eterps commented Jan 23, 2024

Thank you @str4d , the way rage uses pinentry works great.

Ideally, I'd like a GUI popup for PIN prompts and a notification for touch prompts.

I am also wondering about getting a notification for touch prompts. Is that possible somehow?

@eterps
Copy link

eterps commented Jan 25, 2024

Thank you @str4d , the way rage uses pinentry works great.

Ideally, I'd like a GUI popup for PIN prompts and a notification for touch prompts.

I am also wondering about getting a notification for touch prompts. Is that possible somehow?

To answer my own question, it seems like this might do it: https://github.com/maximbaz/yubikey-touch-detector

@dxmh
Copy link

dxmh commented Nov 27, 2024

To answer my own question, it seems like this might do it: https://github.com/maximbaz/yubikey-touch-detector

I use yubikey-touch-detector to notify me when sudo requires a touch of the YubiKey. It works great. I recently set up passage with age-plugin-yubikey and I was surprised to find it didn't notify me to touch when passage needed the YubiKey to decrypt. I believe this is why: maximbaz/yubikey-touch-detector#22

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants