blacs30

Can you try and delete all `com.lisowski-development.alfred.bitwarden` items from keychain and run the login process again? It fails here in the javascript where it would write the received token into keychain.

Oh. I will check the script later once more. Was it ever working for you before?

Thanks for the logs. 
2 more things I haven't asked yet;
- Does the bw login work fine in the terminal? Can you try that, and once you are logged in, then the alfred workflow just needs an unlock
- run a normal `bw logout` in the terminal and then delete this file: `rm ~/Library/Application\ Support/Bitwarden\ CLI/data.json` (it contains the encrypted secrets, loaded from the bitwarden server); then run bw login again, via terminal and/or via workflow

So do I understand that you got the workflow partly working now?
One thing which doesn't really work yet easily is the usage of the bitwarden-cli in the terminal and in parallel the bitwarden workflow. that is because the session token will change each time an unlock happens and all the secrets are re-encrypted.

As a workaround you can use this script to share the same token between the cli and the workflow https://github.com/luckman212/bitwarden-cli-helpers
 
Thanks for mentioning the issue that after logout the wrong item is placed to unlock.. that will require a fix from my side.
 

You can see the output best in the debug mode of the Alfred workflow. Click on the bug icon at the top right for it.
Have you checked these steps https://github.com/deanishe/awgo/wiki/Catalina not sure if they are relevant for this step.
 
Could you please update to the latest version as well. The command changed to .bitauto

In the changelog for the most recent version, it looks like the keywords have changed, but the README hasn't been updated to reflect the change:
 
 

Bitwarden Alfred Workflow
https://github.com/blacs30/bitwarden-alfred-workflow
 
 
Features
* Completely rewritten in go
* fast secret / item search thanks to caching (no secrets are cached only the keys/names)
  * cache is encrypted
* access to (almost) all object information via this workflow
* download attachments via this workflow
* show favicons of the websites
* auto update
* uses the [awgo](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc) framework/library
* many customizations possible
 

 
Installation
- Download the latest release https://github.com/blacs30/bitwarden-alfred-workflow/releases
- Open the downloaded file in Finder
- Make sure that the Bitwarden CLI https://github.com/bitwarden/cli#downloadinstall is installed
- If running on macOS Catalina or later, you _**MUST**_ add Alfred to the list of security exceptions for running unsigned software. See  this guide https://github.com/deanishe/awgo/wiki/Catalina for instructions on how to do this.
  - Yes, this sucks and is annoying, but there is unfortunately is no easy way around this. macOS requires a paying Developer account for proper app notarization. I'm afraid I'm not willing to pay a yearly subscription fee to Apple just so that this (free and open source) project doesn't pester macOS Gatekeeper
 
Usage
To use, activate Alfred and type `.bw` to trigger this workflow. From there:
- type `.bwauth` for login/logout/unlock/lock
- type `.bwconfig` for settings/sync/workflow update/help/issue reports
- type any search term to search for secrets/notes/identities/cards
- modifier keys and actions are presented in the subtitle, different actions are available depending on the object type
 
Advanced Features / Configuration
Please see the README in the git repository, the table is better formatted over there https://github.com/blacs30/bitwarden-alfred-workflow/blob/master/README.md

Develop locally
1. Install alfred cli <br>
`go get -u github.com/jason0x43/go-alfred/alfred`
2. Clone [this repo](https://github.com/blacs30/bitwarden-alfred-workflow).
3. Link the workflow directory with Alfred <br>
`cd workflow; alfred link`
4. Install dependency and run the first build<br>
`make build`
 
Colors and Icons
*Light blue*
Hex: #175DDC <br>
RGB: 23,93,220
*Darker blue*
Hex: #134db7 <br>
RGB: 20,81,192
Get icons as pngs here https://fa2png.app/ and this is the browser https://fontawesome.com/cheatsheet

Licensing and Thanks
The icons are based on [Bitwarden Brand](https://github.com/bitwarden/brand) , (https://fontawesome.com/) and [Material Design](https://materialdesignicons.com/) Icons.
Parts of the README are taken over from [alfred-aws-console-services-workflow](https://github.com/rkoval/alfred-aws-console-services-workflow)
Source that helped me to get started
- [Writing Alfred workflows in Go](https://medium.com/@nikitavoloboev/writing-alfred-workflows-in-go-2a44f62dc432)
- [Example of the awgo package] (https://github.com/deanishe/awgo/blob/master/_examples/update/main.go)
- [awgo package](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc)

Troubleshooting
- "I'm seeing the following dialog when running the workflow" 
  Per the installation steps https://github.com/blacs30/bitwarden-alfred-workfloww#installation, you **_MUST_** add Alfred to the list of Developer Tool exceptions for Alfred to run any workflow that contains an executable (like this one)

Update: 
Version 2.3.0 is released. Get it from github https://github.com/blacs30/bitwarden-alfred-workflow/releases/tag/2.3.0
 
After some months I am releasing this version which adds 2 features which were requested:
 
- The auto lock service locks the Bitwarden workflow after every start and after a configurable time read more here
- The auto sync service which syncs Bitwarden in the background multiple times a day with configurable times see more here

Bitwarden Alfred Workflow
https://github.com/blacs30/bitwarden-alfred-workflow
 
 
Features
* Completely rewritten in go
* fast secret / item search thanks to caching (no secrets are cached only the keys/names)
  * cache is encrypted
* access to (almost) all object information via this workflow
* download attachments via this workflow
* show favicons of the websites
* auto update
* uses the [awgo](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc) framework/library
* many customizations possible
 

 
Installation
- Download the latest release https://github.com/blacs30/bitwarden-alfred-workflow/releases
- Open the downloaded file in Finder
- Make sure that the Bitwarden CLI https://github.com/bitwarden/cli#downloadinstall is installed
- If running on macOS Catalina or later, you _**MUST**_ add Alfred to the list of security exceptions for running unsigned software. See  this guide https://github.com/deanishe/awgo/wiki/Catalina for instructions on how to do this.
  - Yes, this sucks and is annoying, but there is unfortunately is no easy way around this. macOS requires a paying Developer account for proper app notarization. I'm afraid I'm not willing to pay a yearly subscription fee to Apple just so that this (free and open source) project doesn't pester macOS Gatekeeper
 
Usage
To use, activate Alfred and type `.bw` to trigger this workflow. From there:
- type `.bwauth` for login/logout/unlock/lock
- type `.bwconfig` for settings/sync/workflow update/help/issue reports
- type any search term to search for secrets/notes/identities/cards
- modifier keys and actions are presented in the subtitle, different actions are available depending on the object type
 
Advanced Features / Configuration
Please see the README in the git repository, the table is better formatted over there https://github.com/blacs30/bitwarden-alfred-workflow/blob/master/README.md

Develop locally
1. Install alfred cli <br>
`go get -u github.com/jason0x43/go-alfred/alfred`
2. Clone [this repo](https://github.com/blacs30/bitwarden-alfred-workflow).
3. Link the workflow directory with Alfred <br>
`cd workflow; alfred link`
4. Install dependency and run the first build<br>
`make build`
 
Colors and Icons
*Light blue*
Hex: #175DDC <br>
RGB: 23,93,220
*Darker blue*
Hex: #134db7 <br>
RGB: 20,81,192
Get icons as pngs here https://fa2png.app/ and this is the browser https://fontawesome.com/cheatsheet

Licensing and Thanks
The icons are based on [Bitwarden Brand](https://github.com/bitwarden/brand) , (https://fontawesome.com/) and [Material Design](https://materialdesignicons.com/) Icons.
Parts of the README are taken over from [alfred-aws-console-services-workflow](https://github.com/rkoval/alfred-aws-console-services-workflow)
Source that helped me to get started
- [Writing Alfred workflows in Go](https://medium.com/@nikitavoloboev/writing-alfred-workflows-in-go-2a44f62dc432)
- [Example of the awgo package] (https://github.com/deanishe/awgo/blob/master/_examples/update/main.go)
- [awgo package](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc)

Troubleshooting
- "I'm seeing the following dialog when running the workflow" 
  Per the installation steps https://github.com/blacs30/bitwarden-alfred-workfloww#installation, you **_MUST_** add Alfred to the list of Developer Tool exceptions for Alfred to run any workflow that contains an executable (like this one)

I guess they were referrring to
 
So storing both the encrypted data and the en-/decryption key in the same unprotected storage ("plainly on disk") is indeed a horrible idea. Storing it in a place that is potentially vulnerable to direct access via malicious websites in case the browser itself is attackable via a browser vulnerability is another issue. The latter is the reason why it is generally not the best idea to use a browser's own password management feature.

Good that you ask and not just "trust" or "hope". Little snitch is a great firewall which can show up all the hidden traffic going out from applications.

Hi,
I would love to start using this workflow. I'm not a expert in reading code so I don't really understand what's happening under the hood. I just wanted to ask if it is secure to use this workflow and if there is any of my data (email, masterpassword) beeing send to the workflow developer or to any servers.
 
Best regards
Noah

Go to the workflow environment variables, and change "2FA_ENABLED" from to "true" to "false", and then you can log in.

With version 2.0.0 I have rewritten the complete workflow and added many new features.
 
I've released version 2.0.3 now and updated the first post in this thread
You can find the latest version on github https://github.com/blacs30/bitwarden-alfred-workflow/release

Bitwarden Alfred Workflow
https://github.com/blacs30/bitwarden-alfred-workflow
 
 
Features
* Completely rewritten in go
* fast secret / item search thanks to caching (no secrets are cached only the keys/names)
  * cache is encrypted
* access to (almost) all object information via this workflow
* download attachments via this workflow
* show favicons of the websites
* auto update
* uses the [awgo](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc) framework/library
* many customizations possible
 

 
Installation
- Download the latest release https://github.com/blacs30/bitwarden-alfred-workflow/releases
- Open the downloaded file in Finder
- Make sure that the Bitwarden CLI https://github.com/bitwarden/cli#downloadinstall is installed
- If running on macOS Catalina or later, you _**MUST**_ add Alfred to the list of security exceptions for running unsigned software. See  this guide https://github.com/deanishe/awgo/wiki/Catalina for instructions on how to do this.
  - Yes, this sucks and is annoying, but there is unfortunately is no easy way around this. macOS requires a paying Developer account for proper app notarization. I'm afraid I'm not willing to pay a yearly subscription fee to Apple just so that this (free and open source) project doesn't pester macOS Gatekeeper
 
Usage
To use, activate Alfred and type `.bw` to trigger this workflow. From there:
- type `.bwauth` for login/logout/unlock/lock
- type `.bwconfig` for settings/sync/workflow update/help/issue reports
- type any search term to search for secrets/notes/identities/cards
- modifier keys and actions are presented in the subtitle, different actions are available depending on the object type
 
Advanced Features / Configuration
Please see the README in the git repository, the table is better formatted over there https://github.com/blacs30/bitwarden-alfred-workflow/blob/master/README.md

Develop locally
1. Install alfred cli <br>
`go get -u github.com/jason0x43/go-alfred/alfred`
2. Clone [this repo](https://github.com/blacs30/bitwarden-alfred-workflow).
3. Link the workflow directory with Alfred <br>
`cd workflow; alfred link`
4. Install dependency and run the first build<br>
`make build`
 
Colors and Icons
*Light blue*
Hex: #175DDC <br>
RGB: 23,93,220
*Darker blue*
Hex: #134db7 <br>
RGB: 20,81,192
Get icons as pngs here https://fa2png.app/ and this is the browser https://fontawesome.com/cheatsheet

Licensing and Thanks
The icons are based on [Bitwarden Brand](https://github.com/bitwarden/brand) , (https://fontawesome.com/) and [Material Design](https://materialdesignicons.com/) Icons.
Parts of the README are taken over from [alfred-aws-console-services-workflow](https://github.com/rkoval/alfred-aws-console-services-workflow)
Source that helped me to get started
- [Writing Alfred workflows in Go](https://medium.com/@nikitavoloboev/writing-alfred-workflows-in-go-2a44f62dc432)
- [Example of the awgo package] (https://github.com/deanishe/awgo/blob/master/_examples/update/main.go)
- [awgo package](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc)

Troubleshooting
- "I'm seeing the following dialog when running the workflow" 
  Per the installation steps https://github.com/blacs30/bitwarden-alfred-workfloww#installation, you **_MUST_** add Alfred to the list of Developer Tool exceptions for Alfred to run any workflow that contains an executable (like this one)

Bitwarden Alfred Workflow
https://github.com/blacs30/bitwarden-alfred-workflow
 
 
Features
* Completely rewritten in go
* fast secret / item search thanks to caching (no secrets are cached only the keys/names)
  * cache is encrypted
* access to (almost) all object information via this workflow
* download attachments via this workflow
* show favicons of the websites
* auto update
* uses the [awgo](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc) framework/library
* many customizations possible
 

 
Installation
- Download the latest release https://github.com/blacs30/bitwarden-alfred-workflow/releases
- Open the downloaded file in Finder
- Make sure that the Bitwarden CLI https://github.com/bitwarden/cli#downloadinstall is installed
- If running on macOS Catalina or later, you _**MUST**_ add Alfred to the list of security exceptions for running unsigned software. See  this guide https://github.com/deanishe/awgo/wiki/Catalina for instructions on how to do this.
  - Yes, this sucks and is annoying, but there is unfortunately is no easy way around this. macOS requires a paying Developer account for proper app notarization. I'm afraid I'm not willing to pay a yearly subscription fee to Apple just so that this (free and open source) project doesn't pester macOS Gatekeeper
 
Usage
To use, activate Alfred and type `.bw` to trigger this workflow. From there:
- type `.bwauth` for login/logout/unlock/lock
- type `.bwconfig` for settings/sync/workflow update/help/issue reports
- type any search term to search for secrets/notes/identities/cards
- modifier keys and actions are presented in the subtitle, different actions are available depending on the object type
 
Advanced Features / Configuration
Please see the README in the git repository, the table is better formatted over there https://github.com/blacs30/bitwarden-alfred-workflow/blob/master/README.md

Develop locally
1. Install alfred cli <br>
`go get -u github.com/jason0x43/go-alfred/alfred`
2. Clone [this repo](https://github.com/blacs30/bitwarden-alfred-workflow).
3. Link the workflow directory with Alfred <br>
`cd workflow; alfred link`
4. Install dependency and run the first build<br>
`make build`
 
Colors and Icons
*Light blue*
Hex: #175DDC <br>
RGB: 23,93,220
*Darker blue*
Hex: #134db7 <br>
RGB: 20,81,192
Get icons as pngs here https://fa2png.app/ and this is the browser https://fontawesome.com/cheatsheet

Licensing and Thanks
The icons are based on [Bitwarden Brand](https://github.com/bitwarden/brand) , (https://fontawesome.com/) and [Material Design](https://materialdesignicons.com/) Icons.
Parts of the README are taken over from [alfred-aws-console-services-workflow](https://github.com/rkoval/alfred-aws-console-services-workflow)
Source that helped me to get started
- [Writing Alfred workflows in Go](https://medium.com/@nikitavoloboev/writing-alfred-workflows-in-go-2a44f62dc432)
- [Example of the awgo package] (https://github.com/deanishe/awgo/blob/master/_examples/update/main.go)
- [awgo package](https://pkg.go.dev/github.com/deanishe/awgo?tab=doc)

Troubleshooting
- "I'm seeing the following dialog when running the workflow" 
  Per the installation steps https://github.com/blacs30/bitwarden-alfred-workfloww#installation, you **_MUST_** add Alfred to the list of Developer Tool exceptions for Alfred to run any workflow that contains an executable (like this one)