Comments (8)
I just discovered that the Heroku gem does this. It says in the Readme that if you're on a Mac your credentials will be stored in your keychain, otherwise they will be stored in plain text in your ~/heroku directory.
I have a ~/.heroku directory that contains my credentials in plain text AND I'm on a mac... What's going on here? Anyone that has access to my computer can do whatever they please to my Heroku applications? no thanks...
from legacy-cli.
+1 keychain is not being used and this is not good
from legacy-cli.
+1 I was shocked when I discovered this. Immediately removed the file. Guess I'll just delete it after each deploy and then reenter my credentials the next time until this is fixed!
from legacy-cli.
+1 I just discovered this file and am very surprised. Password in plaintext? At the very least, the docs at http://docs.heroku.com/quickstart should reflect this. Please make a change so that passwords aren't stored in plaintext!
from legacy-cli.
it should be also fixed on other platforms and not just mac :)
from legacy-cli.
I further agree that credentials (especially the password) should not be stored in plaintext! Maybe make it an option to have the heroku gem remember your credentials instead of being the default behavior? Nevertheless, thanks for a wonderful product!
from legacy-cli.
If the goal is ease of use while maintaining security, please just store the username and require the password to be entered each time. As an interesting thought, please also support using SSH keys for all Heroku API operations, not just for git push.
from legacy-cli.
We're moving over to API keys. Delete your ~/.heroku/credentials file and run any command to reauthenticate.
from legacy-cli.
Related Issues (20)
- heroku run -- myapp --help fails HOT 1
- heroku pg:pull ignoring PGPORT when calling `createdb` HOT 2
- Error Running Heroku CLI After Successful Install HOT 3
- Heroku login fails on Linux
- Upgrade net-ssh for better Ruby 2.4 support HOT 1
- Heroku client internal error HOT 2
- Unable to run any commands from heroku-cli HOT 1
- CLI update has broken CLI HOT 3
- issue with heroku login console HOT 1
- heroku client broken, throws errors HOT 4
- Heroku client internal error HOT 1
- nil error when running just "Heroku" HOT 2
- undefined method `split' for nil:NilClass (NoMethodError) HOT 3
- Don't dump creds when login fails HOT 1
- when i m installing heroku -cli and run that program on my cmd window, i get error like this....!Xz:invalid header magic bytesef HOT 1
- no puedo acceder ni hacer deploy. Alguna solución? HOT 1
- heroku local malfunctions versus heroku cloud deployed App HOT 1
- undefined method `addons' for Heroku::Addons:Module
- nk@traclpo
- d
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from legacy-cli.