Universal Autofill in Terminal/iTerm for non-sudo commands

elyscape

1Password seems to have specific handling for Terminal.app and iTerm.app such that it will only actually autofill if the user is being prompted for a password in response to running a sudo command. At all other times, it will silently do nothing. Ideally, it would be possible to use autofill at all times; there are many other circumstances under which it is necessary to type a password into a terminal. Additionally, I would recommend against using Secure Keyboard Entry mode as a filter. While many apps do correctly enable it when prompting for a password, it's an imperfect signal; commands running in an SSH session are not able to set it, and also that would prevent use cases such as autofilling a password into a configuration file.

---

1Password Version: 8.8.0-21
Extension Version: N/A
OS Version: macOS 12.3.1

elyscape

Incidentally, I only was able to figure out that this was happening when I carefully reread the Universal Autofill documentation, and saw this:

With 1Password and Universal Autofill, you can fill your usernames and passwords everywhere you need to sign in on your Mac:

• in all your apps and websites
• anywhere you’re asked to log in as an administrator on your Mac
• when you run sudo commands in your terminal app

That third bullet point explained the issue. The problem is that I consider "all your apps" to include my terminal app, and I suspect that I am far from alone in this.

Jack.P_1P

Hey @elyscape:

Great question! While we'd absolutely love to see Universal Autofill support remote user accounts via SSH (I ran into this myself a day or so ago working on a personal project of mine), as it currently stands, Universal Autofill will only fill sudo in the context of your local machine. In other words, if you SSH into the host example.com, and you're prompted for your sudo password, 1Password isn't able to fill that.

With that said, I've filed an issue on your behalf, so hopefully in the future we'll see Universal Autofill work over SSH!

Jack

ref: dev/core/core#15286

elyscape

@Jack.P_1P To be clear, this is not a request for the ability to autofill sudo prompts on remote systems. It's a request for the ability to autofill at arbitrary times in terminal apps, even when the user isn't being prompted by sudo.

Jack.P_1P

Hey @elyscape:

That's my bad, I misread your original post a bit. I'll file a separate feature request for arbitrary Universal Autofill in terminal apps. Thanks for following up and catching that! 😀

Jack

ref: IDEA-I-1036

ssgelm

Yeah this makes universal autofill totally useless for me. So far I haven't been able to use it in any place I've needed it, namely arbitrary password prompts on remote servers and to fill my gmail password in Mailplane.

Jack.P_1P

Hi @ssgelm:

Thanks for your feedback on this, I'll add your voice to the issue I referenced above! With that said, I was able to use Universal Autofill to fill my Gmail password into Mailplane. Would you mind sharing where you're running into trouble?

Jack

ssgelm

My issue was specifically trying to fill in an SSO page that was redirected, so not a google.com domain.

ssgelm

In general I really can appreciate the desire/need for guard rails for this feature, but I would request that there be an advanced configuration option to disable them. Ideally I'd really like the ability to paste passwords into any arbitrary location, not rely on an allowlist from 1password.