awsAuthRefresh now accepts a structured file, args and env form so no shell is involved.
What's wrong with this entry?
The awsAuthRefresh setting, which runs a command to refresh AWS credentials, now takes either the old shell string or a structured {file, args, env} form that avoids a shell.
- For the structured form the executable is resolved and rejected unless it sits in a safe directory: "AWS auth refresh: executable not found in a safe directory".
.cmdand.battargets are quoted and run through a shell.- Failure and timeout messages now name the command that was run instead of pointing at the settings key.
AWS auth refresh: executable not found in a safe directory
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.228
Host auth token refresh hands back the full response
Both mention auth refresh
-
v2.1.242
Cloud headless can ask its host to refresh the OAuth token
Both mention auth refresh
-
v2.1.234
Signing back into the same account keeps a pending auto-resume
Both mention auth