Skip to main content
Sep 23, 2022 12:30 PM UTC
Question

request: remember application approval for SSH agent

my intelliJ app has Git Toolbox plugin which checks git via SSH every 10 minutes. Due to this, I continuously get 1Password 8 on macOS asking if I want to allow this PHPStorm to access the SSH key.
Can you please add an option to remember the setting? Otherwise I need to revert moving to the 1password 8 SSH agent.


1Password Version: 8.9.4
Extension Version: Not Provided
OS Version: macOS
Browser:_ Not Provided

24 replies

Sep 23, 2022 12:30 PM UTC

@floris_1P hopefully you can help?

floris_1P
1Password Employee
1Password Employee
Sep 23, 2022 3:58 PM UTC

That doesn't sound right! So are you getting prompted on every single Git fetch? Without 1Password locking in the mean time? If so, it would be helpful if you could collect and submit your SSH agent diagnostics, as described here. And also include your PhpStorm version number.

You should only be prompted once here, until 1Password locks.

Sep 24, 2022 3:23 AM UTC

Does he even need to prompt ever? apart from once - I don't mean once per system reboot, or once per 1password lock/unlock session, I mean once and done for life.. Im okay with unlocking 1password every reboot, but if I have to unlock a dozen private keys (there a reason for a dozen separate) each time I reboot Im going back to keepassxc as my ssh-agent

keepassxc has this nailed. Just the end user or at least let us override some config file to allow this, beyond annoying

Oct 1, 2022 7:19 AM UTC

it would be helpful if you could collect and submit your SSH agent diagnostics

Sorry, i'm unable to provide this.

i'm constantly locking my computer when i leave it (coffee / bathroom / phone call). So having to confirm phpStorm / webStorm access to the SSH key again is terribly annoying.
Also, when i'm watching a movie, 1password's prompt is popping up for phpStorm over the movie - and for some reason not just once. It happened 3+ times (may have been different keys).

Overall, good thought having SSH keys in 1password: but real world, the prompts are overboard. As @sitepodmatt mentioned: the request should be once per app, and it's set for that app.

I can't recommend my company turn this on until it's matured, and i've turned it off now and gone back to the files.

Oct 25, 2022 7:15 PM UTC

At the moment, we don’t have a way to authorize an application “for life.” However there are settings to adjust the frequency.

Under Preferences -> Developer, you could set it to remember an application until it or 1Password quits.

Note that a newly started application will always ask to authorize.

Under Preferences -> Security -> Auto-lock, you can find 1Password lock settings.

As for the prompts interrupting you, we have something coming soon to help alleviate that!

I’d love to get your feedback on how it feels with these settings changed!

Nov 4, 2022 10:45 AM UTC

I tried those changes, and I was still getting prompted multiple times a day (i.e. every time I unlocked my machine). It was also annoying when I was writing something, and the prompt would take over my screen's focus.
I then turned it off.

Nov 15, 2022 11:42 AM UTC

Is this on the roadmap? Highly frustating - Make this "Note that a newly started application will always ask to authorize." a checkbox rather than a forced mandate..

Jack_P_1P
1Password Employee
1Password Employee
Nov 29, 2022 7:26 PM UTC

Hi @sitepodmatt:

Thanks for your feedback on this. While I can't promise anything specifically, I'll share your thoughts with the team.

Jack

Jan 30, 2023 5:05 PM UTC

Following. I'm experiencing the same thing but so far I haven't been able to nail down which locking event is messing up my expectations -- still working on that though. I'm hoping to have a situation where I can grant access to the SSH key once every 12 hours (or sooner if I restart IntelliJ).

Jack_P_1P
1Password Employee
1Password Employee
Feb 3, 2023 6:17 PM UTC

Hi @hughbiquitous:

While I can't share any specifics, we are working on making some improvements to this. Stay tuned.

Jack