3 ms·
> (Am also not really a fan of having to eventually use a browser for authenticating a terminal session, but that's another problem.) That sounds awful, I hope
by johnisgood 2y ago
> (Am also not really a fan of having to eventually use a browser for authenticating a terminal session, but that's another problem.)
That sounds awful, I hope this is not the direction we are heading towards.
- godelski 2y agoIt happens when there's a cloudflared instance. It is quite annoying
- johnisgood 2y agoThat is insane to me. It really requires a browser for a terminal session? No alternatives? Why does it require a browser?
- godelski 2y agoIDK if there was an alternative. But that's how it worked at a previous employer. You'd ssh, a tab would open in your browser, and you'd need to approve the connection. But this doc I found suggests that's my experience is just how it works (very end)[0]. But note that it says legacy (it did not previously when I was using it) [0] https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-cloudflared-authentication/ https://developers.cloudflare.com/cloudflare-one/connections...
- cyberax 2y agoYou can actually have a fully command-line driven Single Sign-On workflow, even anchored in hardware (TouchID, FIDO tokens, etc.) It's not a common way to do it, but it's definitely a possibility.
- johnisgood 2y agoLike Yubikeys? I've always wanted to get one. My workflow does not require a browser though, thankfully.