Skip to main content
September 23, 2022
Question

request: remember application approval for SSH agent

  • September 23, 2022
  • 24 replies
  • 2407 views

my intelliJ app has Git Toolbox plugin which checks git via SSH every 10 minutes. Due to this, I continuously get 1Password 8 on macOS asking if I want to allow this PHPStorm to access the SSH key.
Can you please add an option to remember the setting? Otherwise I need to revert moving to the 1password 8 SSH agent.


1Password Version: 8.9.4
Extension Version: Not Provided
OS Version: macOS
Browser:_ Not Provided

24 replies

wiredhostAuthor
September 23, 2022

@floris_1P hopefully you can help?

floris_1P
1Password Employee
September 23, 2022

That doesn't sound right! So are you getting prompted on every single Git fetch? Without 1Password locking in the mean time? If so, it would be helpful if you could collect and submit your SSH agent diagnostics, as described here. And also include your PhpStorm version number.

You should only be prompted once here, until 1Password locks.

September 24, 2022

Does he even need to prompt ever? apart from once - I don't mean once per system reboot, or once per 1password lock/unlock session, I mean once and done for life.. Im okay with unlocking 1password every reboot, but if I have to unlock a dozen private keys (there a reason for a dozen separate) each time I reboot Im going back to keepassxc as my ssh-agent

keepassxc has this nailed. Just the end user or at least let us override some config file to allow this, beyond annoying

wiredhostAuthor
October 1, 2022

it would be helpful if you could collect and submit your SSH agent diagnostics

Sorry, i'm unable to provide this.

i'm constantly locking my computer when i leave it (coffee / bathroom / phone call). So having to confirm phpStorm / webStorm access to the SSH key again is terribly annoying.
Also, when i'm watching a movie, 1password's prompt is popping up for phpStorm over the movie - and for some reason not just once. It happened 3+ times (may have been different keys).

Overall, good thought having SSH keys in 1password: but real world, the prompts are overboard. As @sitepodmatt mentioned: the request should be once per app, and it's set for that app.

I can't recommend my company turn this on until it's matured, and i've turned it off now and gone back to the files.

October 25, 2022

At the moment, we don’t have a way to authorize an application “for life.” However there are settings to adjust the frequency.

Under Preferences -> Developer, you could set it to remember an application until it or 1Password quits.

Note that a newly started application will always ask to authorize.

Under Preferences -> Security -> Auto-lock, you can find 1Password lock settings.

As for the prompts interrupting you, we have something coming soon to help alleviate that!

I’d love to get your feedback on how it feels with these settings changed!

wiredhostAuthor
November 4, 2022

I tried those changes, and I was still getting prompted multiple times a day (i.e. every time I unlocked my machine). It was also annoying when I was writing something, and the prompt would take over my screen's focus.
I then turned it off.

November 15, 2022

Is this on the roadmap? Highly frustating - Make this "Note that a newly started application will always ask to authorize." a checkbox rather than a forced mandate..

Jack_P_1P
1Password Employee
November 29, 2022

Hi @sitepodmatt:

Thanks for your feedback on this. While I can't promise anything specifically, I'll share your thoughts with the team.

Jack

January 30, 2023

Following. I'm experiencing the same thing but so far I haven't been able to nail down which locking event is messing up my expectations -- still working on that though. I'm hoping to have a situation where I can grant access to the SSH key once every 12 hours (or sooner if I restart IntelliJ).

Jack_P_1P
1Password Employee
February 3, 2023

Hi @hughbiquitous:

While I can't share any specifics, we are working on making some improvements to this. Stay tuned.

Jack