skarbiec login list

Invocation#

skarbiec login list <host|address>

Purpose#

See which logins the browser autofill extension would offer on a site before you open it there, and find the logins it would offer nowhere because they name no domain.

Required inputs and options#

• One positional: a host such as github.com or a whole address such as https://github.com/login. The scheme, any user, the port and the path are dropped and the host is lowercased. A login's sites are its context.domains list and context.domain when it states a list; a login that states none, as one imported from a browser, Bitwarden or 1Password does, is for the hosts of the addresses it was imported with (context.url and context.urls) and its context.domain. A login is offered on a host when one of its sites is that host or a parent domain of it, so a login for example.com is offered on login.example.com and never on notexample.com; the browser host decides with the same functions.

Output and state effects#

• Prints ok, host, logins (item, name from context.display_name — the name an import or login new --name records — or null, username and domains), without_domain (the live logins that have no site) and unreadable (item and error). Each live login is decrypted to read its context and username; the password and any one-time code are never put into the answer. It writes nothing. POST /v1/operator/items/logins-for takes site; Desktop's Settings → Policy shows it as Logins for a site.

Refusals#

• A missing or blank site exits 2 with `usage: login list <host or address>, such as github.com or https://github.com/login`, and an address that names no host exits 2 with `<site> names no host`. A login that will not open is listed under unreadable with its decryption error rather than left out, because a missing row would read as no login for that site.