1Password

[AlanGreene]

• Make sure latest version installed (currently 8.x) https://1password.com/product/mac/
• Git commit signing using SSH keys in 1Password 8 https://www.youtube.com/watch?v=BMFvhl0WRFQ
• Passkeys https://www.future.1password.com/passkeys/

[AlanGreene]

add 1password-cli to brewfile
enable in desktop app
enable shell completion i.e. source <(op completion bash)

$ op item get "name of item" --format json --fields password | jq .reference
"op://…"

$ op read "op://…"
***

docker login -u $(op read op://prod/docker/username) -p $(op read op://prod/docker/password)

op://vault-name/item-name/[section-name/]field-name

inject secrets into config files: https://developer.1password.com/docs/cli/secrets-config-files/#step-2-inject-the-secrets

example of loading secrets to environment

export GITHUB_TOKEN=op://development/GitHub/credentials/personal_token
op run -- gh

using an env file

# prod.env
AWS_ACCESS_KEY_ID="op://development/aws/Access Keys/access_key_id"
AWS_SECRET_ACCESS_KEY="op://development/aws/Access Keys/secret_access_key"

op run --env-file="./prod.env" -- aws

concatenate multiple secrets:

echo "db_url: postgres://{{ op://lcl/db/user }}:{{ op://lcl/db/pw }}@{{ op://lcl/db/host }}:{{ op://lcl/db/port }}/{{ op://my-app-prd/db/db }}" | op inject
db_url: postgres://admin:admin@127.0.0.1:5432/my-app"

use variables in secret references

echo "db_password: op://$env/db/password" | env=prod op inject
db_password: fX6nWkhANeyGE27SQGhYQ

use attributes to get OTP code
op read "op://development/GitHub/Security/one-time password?attribute=otp"

get SSH private key in correct format
op read "op://Private/ssh keys/ssh key/private key?ssh-format=openssh"

[AlanGreene]

example to auto-fill the GP VPN form:

# vpn.tpl
# osascript -e "$(op inject -i ~/Desktop/vpn.tpl)"

tell application "System Events"
  tell process "GlobalProtect"
    if not (exists window 1) then
      click menu bar item 1 of menu bar 2 -- Activates the GlobalProtect "window" in the menubar
      delay 2 -- Wait for 2 seconds
    end if
    set frontmost to true -- keep window 1 active
    tell window 1
      if exists (first button whose title is "Connect") then
        tell (first button whose title is "Connect") to if exists then click
        delay 3
      end if

      set value of text field 1 to "op://vault/item/username"
      set value of text field 2 to "op://vault/item/password"

      if exists (first button whose title is "Connect") then
        tell (first button whose title is "Connect") to if exists then click
      end if
    end tell
  end tell
end tell

[AlanGreene]

It seems like the structure / order of the windows changes depending on whether it's a clean session, previously expired / error, etc.

Here's a more flexible approach that searches all windows of the app for the relevant elements instead of assuming a specific structure.

There's probably a cleaner more "AppleScript"-y way of doing this but it seems to work:

# vpn.tpl
# osascript -e "$(op inject -i ~/Desktop/vpn.tpl)"

on findElementInWindow(windowRef, elementType, searchValue)
  tell application "System Events"
    try
      if elementType is "text field"
        set targetElement to first text field of windowRef whose value of attribute "AXPlaceholderValue" is searchValue
      else if elementType is "button"
        set targetElement to first button of windowRef whose title is searchValue
      end if
      return targetElement
    on error
      return null
    end try
  end tell
end findElementInWindow

on getElement(elementType, searchValue)
  tell application "System Events"
    tell process "GlobalProtect"
      set allWindows to windows
      set windowCount to count of allWindows

      repeat with i from 1 to windowCount
        set currentWindow to item i of allWindows
        set foundElement to my findElementInWindow(currentWindow, elementType, searchValue)

        if foundElement is not null then
          return foundElement
        end if
      end repeat
      error number 1
    end tell
  end tell
end getElement

on setFieldByPlaceholder(placeholderText, fieldValue)
  tell application "System Events"
    tell process "GlobalProtect"
      set inputField to my getElement("text field", placeholderText)
      if inputField is not null then
        log "Setting " & placeholderText
        set value of inputField to fieldValue
      end if
    end tell
  end tell
end setFieldByPlaceholder

on clickButton(buttonTitle)
  tell application "System Events"
    tell process "GlobalProtect"
      set foundButton to my getElement("button", buttonTitle)
      if foundButton is not null then
        click foundButton
      end if
    end tell
  end tell
end setFieldByPlaceholder

tell application "GlobalProtect" to activate

tell application "System Events"
  tell process "GlobalProtect"
    if not (exists window 1) then
      click menu bar item 1 of menu bar 2 -- Activates the GlobalProtect "window" in the menubar
      delay 2 -- Wait for 2 seconds
    end if

    set frontmost to true

    my clickButton("Connect")
    delay 3
  end tell
end tell

setFieldByPlaceholder("Username", "op://Employee/Softlayer - GlobalProtect VPN/username")
setFieldByPlaceholder("Password", "op://Employee/Softlayer - GlobalProtect VPN/confirmpassword")

tell application "System Events"
  tell process "GlobalProtect"
    my clickButton("Connect")
  end tell
end tell