How do I add connections with secure secrets? about nvim-dbee HOT 5 CLOSED

Hey, @cseickel
I implemented some functionality we discussed here in this PR: #9.

I would appreciate if you look at it / try it out / give any kind of feedback whatsoever.

Thanks :D

from nvim-dbee.

Hi @cseickel,
thanks for the suggestions.
All are valid points in my opinion.

1. and 2. are pretty straight forward, whereas 3. would need a bit of thinking.

To add on top of 3.:

• add a simple file for project local configs (just a list of connections.
• environment variables seem the most straight forward so I preffer it over integrating pass (although I wouldn't say it's completely out of the question - maybe sometime in the future?).
• I think we go with the first syntax option you mentioned (${{}}) and just inject env vars once connecting to the db. That would probably be enough for now.
• I like the concept with proprietary secrets you created, but I fear it could get a bit confusing for new users - I need sit on it a bit.

That's an approximate TODO for this issue, I would love to hear your thoughts about it.

Other than that I'll start working on that as soon as I have some extra time.

from nvim-dbee.

I think we go with the first syntax option you mentioned (${{}}) and just inject env vars once connecting to the db. That would probably be enough for now.

I agree that seems like the simplest way to go about it, and users can do a lot to roll their own solutions that inject env variables. One thing that may trip you up there is if you are checking the variables from an external (go) process, will it see the same env variables that are in nvim's process? If not then it might not work out.

For # 3, on further thought it would probably be a maintenance nightmare. It might be simpler to just integrate your own secret storage with an encrypted file. I'm sure there are go libraries you can use, and the input could just be an interactive prompt if the password was not set in the config.

from nvim-dbee.

One thing that may trip you up there is if you are checking the variables from an external (go) process, will it see the same env variables that are in nvim's process? If not then it might not work out.

I thought about that, yeah - one can also have a plugin that messes with vim.env jn lua - so we would need to read env in lua in my opinion - I'd still like to test go first - it might even work.

I also thought about an encrypted file - sounds like a good Idea to me!

from nvim-dbee.

closed with #9

from nvim-dbee.