Skip to content

feature request: browser integration to make interactive authentication more smooth #46

@jku

Description

@jku

Currently interactive auth results in this:

$ sign_blob README.md -o README.md.sigstore.json
Signing artifact: README.md
  Size: 7571 bytes
  Starting interactive authentication...

Please visit: https://oauth2.sigstore.dev/auth/device
Or open: https://oauth2.sigstore.dev/auth/device?user_code=ABCD-EFGH

Enter code: ABCD-EFGH

Waiting for authentication...

Would be nice to do a couple of things to smooth this experience:

  • the local-redirect-server trick so we don't need to show the user the device code at all -- see sigstore-python or cosign for examples
  • try to open a browser automatically. If browser open does not work, then print the URL

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions