unity-gateway: OAuth JWT written world-readable (0644) by ug configure
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 56/100
Research direction
Start by tracing how ug configure --user --agents opencode writes ~/.ucode/opencode-xdg/opencode/opencode.json, ucode-auth.js, and state.json, and compare their permissions with managed-config.json. Reproduce the setup and check the resulting file and directory modes; done means the live token is not readable by other local users, with the chosen approach consistent across these files.
Written by the indexing model from the issue text.
Description
ug configure --user --agents opencode (v0.2.1) writes the live OAuth access token (client_id databricks-cli, about 1 hour remaining) into ~/.ucode/opencode-xdg/opencode/opencode.json as both options.apiKey and options.headers.Authorization.
The file has mode -rw-r--r--, so any local user can read it, and ucode-auth.js and state.json are also 0644. managed-config.json is correctly 0600. Suggested fix: create these files with mode 0600 and the directory with 0700, or avoid writing the token and rely on the refresh plugin. Checked on macOS arm64, v0.2.1.
- Dominant language
- Python
- Stars
- 122
- Forks
- 101
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 198
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from databricks/unity-gateway
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
databricks/unity-gateway#1042 · 3 comments ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
databricks/unity-gateway#1021 · 1 reaction ·
Maintainers usually reply within 1 day
-
feat(codex): support amazon_bedrock Model Provider Services that expose OpenAI-compatible modelsOpen
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
databricks/unity-gateway#454 ·
Maintainers usually reply within 1 day
-
ucode opencode ignores the user's own OpenCode configPossibly taken @larsmoan claimed this 79 days ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
databricks/unity-gateway#391 ·
Maintainers usually reply within 1 day
-
Support Custom $CLAUDE_CONFIG_DIRPossibly taken @eabrouwer3 claimed this 15 days ago. Open
Difficulty 1/5 Under an hour Newbie friendliness 88/100
databricks/unity-gateway#342 ·
Maintainers usually reply within 1 day
All issues in databricks/unity-gateway
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 67/100
FinanceFlash/unvibecode#699 ·
Maintainers usually reply within 1 day
-
enhancement Website
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
OWASP/OWASP-Hunting#96 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
micropython/micropython#19942 ·
Maintainers usually reply within 1 day
-
A rebuild posts "not part of this build" success to the commit's failed `nix-build` gate and effectsPossibly taken @Padraic-O-Mhuiris claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
`epoch.Integer` raises a raw OverflowError for integers too large to convert to a floatPossibly taken @arindam77 claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
pydantic/pydantic-extra-types#479 ·
Maintainers usually reply within 1 day