Last active
March 30, 2021 05:45
-
-
Save cryzed/d3e5cf53cea25ac9fc87a758c6136ae7 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python | |
| # Dependencies: python-tldextract, pass | |
| import argparse | |
| import enum | |
| import fnmatch | |
| import functools | |
| import os | |
| import re | |
| import shlex | |
| import subprocess | |
| import sys | |
| import tldextract | |
| PASSWORD_STORE_PATH = os.path.expanduser('~/.password-store') | |
| DMENU_INVOCATION = 'rofi -dmenu' | |
| ENCODING = 'UTF-8' | |
| argument_parser = argparse.ArgumentParser() | |
| argument_parser.add_argument('url', nargs='?', default=os.getenv('QUTE_URL')) | |
| argument_parser.add_argument('--password-store', '-p', default=PASSWORD_STORE_PATH) | |
| argument_parser.add_argument('--username-pattern', '-u', default=r'.*/(.+)') | |
| argument_parser.add_argument('--username-target', '-U', choices=['path', 'secret'], default='path') | |
| argument_parser.add_argument('--password-pattern', '-P', default=r'(.*)') | |
| argument_parser.add_argument('--dmenu-invocation', '-d', default='rofi -dmenu') | |
| stderr = functools.partial(print, file=sys.stderr) | |
| class ExitCodes(enum.IntEnum): | |
| SUCCESS = 0 | |
| COULD_NOT_DETERMINE_URL = 1 | |
| COULD_NOT_DETERMINE_DOMAIN = 2 | |
| NO_PASS_CANDIDATES = 3 | |
| COULD_NOT_MATCH_USERNAME = 4 | |
| COULD_NOT_MATCH_PASSWORD = 5 | |
| def qute_command(command): | |
| with open(os.environ['QUTE_FIFO'], 'w') as fifo: | |
| fifo.write(f'{command}\n') | |
| fifo.flush() | |
| def find_pass_candidates(domain, password_store_path=PASSWORD_STORE_PATH): | |
| candidates = [] | |
| for path, directories, file_names in os.walk(password_store_path): | |
| if directories or domain not in path.split(os.path.sep): | |
| continue | |
| # Strip password store path prefix to get the relative pass path | |
| pass_path = path[len(password_store_path) + 1:] | |
| secrets = fnmatch.filter(file_names, '*.gpg') | |
| candidates.extend(os.path.join(pass_path, os.path.splitext(secret)[0]) for secret in secrets) | |
| return candidates | |
| def pass_(path): | |
| process = subprocess.run(['pass', path], stdout=subprocess.PIPE, encoding=ENCODING) | |
| return process.stdout.strip() | |
| def dmenu(items, invocation=DMENU_INVOCATION): | |
| command = shlex.split(invocation) | |
| process = subprocess.run(command, input='\n'.join(items), stdout=subprocess.PIPE, encoding=ENCODING) | |
| return process.stdout.strip() | |
| def main(arguments): | |
| # Domain wasn't overriden using CLI argument or found in qutebrowser environment variable | |
| if not arguments.url: | |
| stderr('Could not determine URL!') | |
| return ExitCodes.COULD_NOT_DETERMINE_URL | |
| domain = tldextract.extract(arguments.url).registered_domain | |
| if not domain: | |
| stderr(f'Could not determine domain from URL: {arguments.url!r}!') | |
| return ExitCodes.COULD_NOT_DETERMINE_DOMAIN | |
| candidates = find_pass_candidates(domain, arguments.password_store) | |
| if not candidates: | |
| stderr(f'No candidates for domain {domain!r} found!') | |
| return ExitCodes.NO_PASS_CANDIDATES | |
| selection = candidates[0] if len(candidates) == 1 else dmenu(candidates, arguments.dmenu_invocation) | |
| secret = pass_(selection) | |
| data = selection if arguments.username_target == 'path' else secret | |
| match = re.match(arguments.username_pattern, data) | |
| if not match: | |
| stderr(f'Failed to match username pattern on {arguments.username_target}!') | |
| return ExitCodes.COULD_NOT_MATCH_USERNAME | |
| username = match.group(1) | |
| match = re.match(arguments.password_pattern, secret) | |
| if not match: | |
| stderr('Failed to match password pattern on secret!') | |
| return ExitCodes.COULD_NOT_MATCH_PASSWORD | |
| password = match.group(1) | |
| # Enter back into insert-mode so the user can immediately continue working | |
| qute_command(f'fake-key {username} ;; fake-key <Tab> ;; fake-key {password} ;; enter-mode insert') | |
| return ExitCodes.SUCCESS | |
| if __name__ == '__main__': | |
| arguments = argument_parser.parse_args() | |
| sys.exit(main(arguments)) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment