https://github.com/talpor/password-scale

Slack command to manage shared passwords between the members of a channel in Slack.
https://github.com/talpor/password-scale

Last synced: about 1 month ago
JSON representation

Slack command to manage shared passwords between the members of a channel in Slack.

• Host: GitHub
• URL: https://github.com/talpor/password-scale
• Owner: talpor
• Created: 2018-06-19T15:35:58.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2022-12-26T21:38:32.000Z (almost 2 years ago)
• Last Synced: 2024-04-18T14:25:53.757Z (8 months ago)
• Language: Python
• Homepage: https://scale.talpor.com/
• Size: 4.04 MB
• Stars: 0
• Watchers: 6
• Forks: 0
• Open Issues: 5
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Slashpass

[![Build Status](https://travis-ci.org/talpor/password-scale.svg?branch=master)](https://travis-ci.org/talpor/password-scale)

Is a Slack command to manage shared passwords between the members of a channel in Slack.

This project was build focused in establishing a communication where the trustness between parties is not required, using the asymmetric algorithm RSA to share encrypted information point to point and where the only participant allowed to read the stored passwords is the _Password Server_, who is different and independent for each client.

## Commands

- `/pass` or `/pass list` list the available passwords in the channel.

- `/pass ` or `/pass show ` retrieve a one time use link with the secret content, this link expires in 15 minutes.

- `/pass insert ` retrieve a link with an editor to create a secret, this link expires in 15 minutes.

- `/pass remove ` make unreachable the secret, to complete deletion in necessary doing it manually from the s3 password storage.

- `/pass register ` this is the command used for the initial setup, it is only necessary to execute it once.

[![button](https://platform.slack-edge.com/img/add_to_slack.png)](https://slack.com/oauth/authorize?client_id=2554558892.385841792964&scope=commands)

## How it work?

Been _Alice_ and _Bob_ members of the same Slack group, they need to share the password of the service _"Bar"_. This is the process that they need to follow to share it. In this example _Alice_ will create the secret and _Bob_ will consult it.

### Creating a secret

- _**Alice:**_ Requests a link to create the secret (`/pass insert Bar`)

- *Proxy Server*: Generates an unique editor link, valid for 15 minutes

- *Slack:* Shows the editor link, only visible for Alice

- _**Alice:**_ Follows the link

- *Proxy Server:* Requests the the public key to the _Password Server_ and send it to the editor

- *Editor:* Displays itself in Alice's browser

- _**Alice:**_ Writes the shared secret

- _**Alice:**_ Press the "Create" button

- *Editor:* Encrypts the secret before sending the request

- *Editor:* Sends the request to the _Proxy Server_

- *Proxy Server:* Sends the encrypted secret to the _Password Server_ (note that this secret is indecipherable for this server)

- *Password Server:* Stores the encrypted secret in the configured S3 bucket.

**Note:** _Editor_ and _Proxy Server_ are the same server, but _Editor_ represents the frontend view.

### Retrieving a secret

- _**Bob:**_ Requests a link to see the secret (`/pass Bar` or `/pass show Bar`)

- *Proxy Server:* Requests the secret to the password server using the Slack team name and channel id

- *Password server:* Reads and decrypt the secret

- *Password server:* Generates one time use link with the secret, valid for 15 minutes (using One-Time Secret API)

- *Password server:* Encrypts the link with the _Proxy Server_ public key

- *Password server:* Sends the encrypted link to the _Proxy Server_

- *Proxy server:* Decrypts the one time use link

- *Proxy server:* Sends the link to Slack

- *Slack:* Shows the link only visible for Bob

- _**Bob**_: Follows the link

- *Onetimesecret*: Shows and destroys the secret