Enhancement: marking password parameter as "hidden"

[gfursin]

I added functionality to CK-WA to enter mandatory parameters via console. However, password parameter in Skype is visible to everyone. Is it possible to mark all such parameters as hidden (or something like that) in all workloads? I.e.

    Parameter('login_pass', kind=str, mandatory=True, **hidden=True,**
              description='Password associated with the account to log into the device'),

I will then use 'getpass' function in Python to obtain this parameter ....
Thanks!!!

[setrofim]

All parameter values need to be specified via configuration on invocation, so the password will need to be in there; if you want to keep it hidden, do not expose the agenda to the user (or mask the values out of there afterwards).

An alternative would be to add support for accessing an external credentials manager (e.g. gnome keyring) to WA and have it retrieve the creds from there if they were not specified via an agenda.

Hiding the password strings from the logs would be harder, as logging happens at a lower level -- command strings get logged automatically as they are executed and the logger has no way of knowing whether there is a password in the string.

I guess, the overriding issue here is that WA currently has no notion of "credentials" -- they are are just regular parameters, and treating the specially would be difficult. We need to add a coherent way of handling authentication information.

We will look to address this in WA3.

[gfursin]

Sure, that makes sense! Please, keep us informed about new "credentials" mechanism in WA3, since we have exactly the same problem in the CK front-end for WA, and will need to provide such support whenever ready! Thanks a lot!