Hi all,
On Settings → Poller → SNMP, the credential fields are currently
rendered as plain text inputs. In our case we share an office floor
where people walk past each other’s screens all day — and every time
someone opens the SNMP settings, the community strings and SNMPv3
authpass / cryptopass are right there in cleartext on the screen.
No exploit needed, just walking by.
I’d like to propose rendering these fields as masked password inputs
with a visibility toggle (eye / eye-slash icon), so admins can still
reveal the value when they need to, but the default state is hidden.
I’ve already built it
Working implementation on my homelab running 26.4.1-dev. All three
field types are covered:
- SNMPv3 auth + crypto passwords
- Community strings (which is an array, so needed a dedicated
component for per-item toggling and drag-and-drop ordering)
Screenshots
:
What would change
SettingPassword.vuegets an eye toggle (existing password fields
likeinfluxdb.password,auth_ldap_binduserget it for free).- SNMPv3
authpassandcryptopassrender viaSettingPassword
instead of plain text inputs. - New
SettingPasswordArraycomponent for array-of-secrets fields. - New type
password-arrayin the schema, small validator extension,
one translation key.
No database migration, no breaking changes — only the render layer
changes.
Questions before I open a PR
- Is the general approach acceptable?
- Type name — I used
password-array, but happy to rename if there’s
a preferred convention (array-password,secret-array, …). - Scope — SNMP only, or also extend to other array-of-secrets fields
in the codebase (alert transport tokens, API keys, etc.)?
What do you think of it?
Thanks!
Greetings
Palermo