Verify signed-in session without biometric prompt

zcutlip

Is there a way to verify if there's a valid signed-in session without popping the biometric dialogue if not?

I'm trying to support a flow in pyonepassword where the caller tells me they expect to have valid session (set via environment variable) and that I should verify that, but have it be a hard failure if not.

If I disable biometric and do something like:

op user get --me

...then it does fail because I need to first do op signin. But if biometric is enabled, any query that hits the account pops a TouchID dialogue even without first doing op signin.

Is there a query that will hard fail, or a way (option, env variable, etc.) to say "if not signed in, please don't offer biometric prompt and fail instead"

andi.t_1P

Hi @zcutlip , I believe op whoami should fit this use case.

Let me know if you have further questions. Best,
Andi

zcutlip

Awesome, thanks! I'm in the process of migrating pyonpassword over to it now. Looking forward to it working with service accounts.

andi.t_1P

Glad I could help, op whoami will soon work with Service Accounts as well, since the issue has been identified on why it wasn't already.