feat: mask coder login token to enhance security (#12948)

michaelbrewer · web-flow · commit 060f023174c7 · 2024-05-03T17:03:13.000-04:00
* feat(login): treat coder token as a secret

* Update login.go
diff --git a/cli/login.go b/cli/login.go
@@ -287,7 +287,8 @@ func (r *RootCmd) login() *serpent.Command {
 				}
 
 				sessionToken, err = cliui.Prompt(inv, cliui.PromptOptions{
-					Text: "Paste your token here:",
+					Text:   "Paste your token here:",
+					Secret: true,
 					Validate: func(token string) error {
 						client.SetSessionToken(token)
 						_, err := client.User(ctx, codersdk.Me)

Original file line number	Diff line number	Diff line change
`@@ -287,7 +287,8 @@ func (r RootCmd) login() serpent.Command {`
`287`	`287`	`}`
`288`	`288`
`289`	`289`	`sessionToken, err = cliui.Prompt(inv, cliui.PromptOptions{`
`290`		`- Text: "Paste your token here:",`
	`290`	`+ Text: "Paste your token here:",`
	`291`	`+ Secret: true,`
`291`	`292`	`Validate: func(token string) error {`
`292`	`293`	`client.SetSessionToken(token)`
`293`	`294`	`_, err := client.User(ctx, codersdk.Me)`