Tangkapan skrin

Penerangan

Integrate TeamPass with modern web browsers In everyday work, testing and operations support teams often need to manage and share large numbers of passwords. For convenience, this has led to widespread use of simple passwords such as 11111 and 123456. The password managers currently available are designed for individuals. Teams can only share entire database files through WebDave, which does not meet the need for role-based access control and layered permissions. The relevant SaaS platforms are either not free or charge a fee (yes, that is contradictory). Although our company built a password management and sharing platform based on the open-source TeamPass, it has been difficult to promote because the open-source software is hard to use. The original author's browser extension costs money, only supports Firefox, and has not been updated for ages. TeamPass supports Ldap login, multilevel folder management, role management, role-based folder read and write permissions, RestAPI, and more. Its features are powerful, but its interface is extremely difficult to use. So all that is needed is a Chrome/Firefox extension that can automatically fill passwords, generate passwords, save new passwords, and update old ones. There are many KeePass extensions for Chrome on Github. After careful selection, we chose keepassxreboot/keepassxc-browser ​ github.com Icon as a template and modified the relevant functions to support the TeamPass interface. The permission management in TeamPass's built-in RestAPI is disorganized. There are user ApiKeys and system ApiKeys, with no separation of permissions, so users can view each other's passwords. It is completely unrelated to the interfaces used by the web management interface. The code is also quite fascinating, and it still works properly, as expected of the best language. First, modify the RestAPI to support only user ApiKeys and provide only the following interfaces: /read/whoami - List the current user's information /read/mypws - List passwords visible to the current user /read/myfolders - List folders visible to the current user /find/item - Find passwords visible to the current user by url and keyword /add/item - Add a password to a specified writable folder /update/item - Update a password Next, modify Kesspassxc-browser to support the six interfaces above.