Running `glab config init` the pasted in token isn't masked in the terminal, when using `glab auth login --hostname` it is
Created by: espoelstra
Description Pasted token not masked in all cases.
Expected Behavior Pasted token should be masked.
Actual Behavior Pasted token appears inline after the prompt.
Steps to Reproduce
glab config init
- Set custom hostname
- Paste token at the prompt
- Observe token in the scrollback/visible output.
Context
This is unsafe if the output of the terminal is being logged somewhere. A workaround might be to redirect in from a file, but that isn't always possible and is unfriendly to inexperienced users and prone to error.
Your Environment
- Version used: 1.11.1
- Operating System and version: Debian Buster (10.6)