03.
— Section 3
Credentials
macOS Keychain
ܡܶܠܬܳܟ ܠܳܐ ܬܳܐܙܰܠ ܠܟܽܬܳܒܳܐ.
jmapcli ܠܳܐ ܢܳܛܰܪ ܪܳܙܳܐ ܥܰܠ ܟܽܬܳܒܳܐ. ܡܶܠܬܳܟ (ܐܰܘ ܐܳܬܳܐ ܕܒܳܐܶܪܰܪ) ܥܳܡܪܳܐ ܒܡܰܓܢܳܢܳܐ ܕܰܥܠܳܠܬܳܐ ܕmacOS; ܡܶܟܬܒܳܐ ܕܚܶܫܒܽܘܢܳܐ — ~/.config/jmapcli/config.json, ܫܽܘܠܛܳܢ 0600 — ܢܳܛܰܪ ܒܰܠܚܽܘܕ ܐܽܘܪܚܳܐ ܕܫܳܪܽܘܬܳܐ, ܫܶܡ ܡܶܫܬܰܡܫܳܢܳܟ ܘܥܶܠܡܳܐ ܕܡܶܨܛܰܢܥܳܢܳܐ. ܚܰܕܬܳܐ ܐܰܢܬ ܠܡܰܓܢܳܢܳܐ ܡܶܢ ܡܰܦܬܚܳܐ? ܟܽܠ ܥܒܳܕܳܐ ܬܠܳܬܳܐ ܦܽܘܩܕܳܢ̈ܐ ܕsecurity ܒܢܰܝܳܐ ܗܽܘ.
1 · ܛܰܡܰܪ ܪܳܙܳܐ — ܘܩܪܺܝܗܝ ܬܽܘܒ. macOS ܫܳܐܶܠ ܠܚܰܝܠܳܐ, ܐܳܦ ܗܳܟܰܢ ܪܳܙܳܐ ܠܳܐ ܡܶܬܕܰܡܰܪ ܒܫܳܪܫܳܐ ܕܦܽܘܩܕܳܢܳܐ, ܠܳܐ ܡܶܬܚܰܙܐ ܥܰܠ ܦܰܪܨܽܘܦܳܐ, ܘܠܳܐ ܡܶܬܟܬܰܒ ܒܬܰܫܥܺܝܬܳܐ ܕܟܰܠܩܽܘܠܳܟ.
# store it — you’re prompted for the secret, nothing echoes
$ security add-generic-password -U -s jmap-password -a you@example.com -l "Boogie JMAP password" -w
# read it back at any time
$ security find-generic-password -s jmap-password -a you@example.com -w
# remove it
$ security delete-generic-password -s jmap-password -a you@example.com
- -s
- service — ܫܶܡ ܕjmapcli ܒܳܥܶܐ: jmap-password ܠܡܶܠܬܳܐ, ܐܰܘ jmap-token ܠܐܳܬܳܐ ܕܒܳܐܶܪܰܪ (ܐܰܝܟ Fastmail); ܦܪܽܘܫ ܒܰܠܚܽܘܕ ܗܰܘ ܕܡܶܫܬܰܡܫܰܬ ܒܶܗ.
- -a
- account — ܐܶܓܰܪܬܳܐ ܕܒܰܪܺܝܕ ܕܺܝܠܳܟ (ܗܰܘ ܫܶܡ ܡܶܫܬܰܡܫܳܢܳܐ ܕܝܳܗܶܒ ܐܰܢܬ ܠjmapcli).
- -l
- label — ܡܳܐ ܕܚܳܙܶܐ ܐܰܢܬ ܒܝܽܘܩܢܳܐ ܕKeychain Access; -U ܡܚܰܕܶܬ ܒܽܘܫܳܐ ܕܰܡܢܳܩܰܕ ܩܰܝܳܡ.
- -w
- ܕܠܳܐ ܚܰܝܠܳܐ — ܫܳܐܶܠ ܪܳܙܳܐ. ܗܳܢܳܐ ܗܽܘ ܡܶܕܶܡ ܕܢܳܛܰܪ ܠܶܗ ܡܶܢ ~/.zsh_history ܘܡܶܢ ܡܶܢܝܳܢܳܐ ܕܦܽܘܠܚܳܢ̈ܐ.
2 · ܐܰܫܳܪ ܠjmapcli ܥܰܠ ܫܳܪܽܘܬܳܟ. ܦܰܓܶܥ ܒܚܶܫܒܽܘܢܳܐ ܚܰܕ ܙܰܒܢܳܐ; ܪܳܙܳܐ ܡܶܬܡܰܫܰܟ ܦܰܐܠܚܳܝܬ ܡܶܢ ܒܽܘܫܳܐ ܕܡܰܓܢܳܢܳܐ ܕܦܰܩܕܰܬ, ܘܠܳܐ ܡܶܬܚܰܙܐ ܡܕܰܡ ܒܫܳܪܫܳܐ ܕܦܽܘܩܕܳܢܳܐ.
$ jmapcli login --url https://mail.example.com --username you@example.com \
--password "$(security find-generic-password -s jmap-password -a you@example.com -w)"
# token auth: swap --password for --token (and store under jmap-token above)
$ jmapcli list # from here on, every command reads the Keychain for you
# OAuth — no app password to create, copy, or rotate.
# Your browser opens once; the token lands in the Keychain under jmap-oauth.
$ jmapcli login --url https://api.fastmail.com --username you@fastmail.com --oauth
# Stalwart — or any server that speaks RFC 8252 — same flag.
$ jmapcli login --url https://mail.example.com --username you@example.com --oauth
3.1
ܡܶܕܶܡ ܠܳܐ ܒܬܰܫܥܺܝܬܳܐ, ܒܦܶܠܓ̈ܳܐ — ܐܳܦ ܠܳܐ ܒܟܳܘܢܳܐ ܕܝܳܕܽܘܥܬܳܐ
ܡܳܐ ܕܪܳܙܳܐ ܒܡܰܓܢܳܢܳܐ ܗܽܘ, ܦܽܘܩܕܳܢ̈ܐ ܝܰܘܡܳܝ̈ܐ (list, send, draft, sync) ܠܳܐ ܛܳܥܢܺܝܢ ܡܶܠܬܳܐ, ܐܳܦ ܗܳܟܰܢ ܠܳܐ ܡܶܫܬܰܒܶܝܐ ܒ~/.zsh_history, ܒܡܶܢܝܳܢܳܐ ܕܦܽܘܠܚܳܢ̈ܐ ܐܰܘ ܒܦܶܠܓ̈ܳܐ ܕCI. ܗܳܢܳܐ ܗܽܘ ܡܶܕܶܡ ܕܦܳܐܶܫ ܒܶܗ jmapcli ܒܳܛܰܝܠܳܐ ܒܡܰܦܬܚܳܐ ܕܝܳܕܽܘܥܬܳܐ — ܨܰܝܳܕܳܐ ܢܳܣܶܒ ܡܨܰܡܶܐ ܕJMAP, ܠܳܐ ܪܳܙܳܟ.
— zsh
CI · agents
3.2
ܚܰܠܶܦ ܐܰܘ ܦܽܘܩ
ܫܰܚܠܶܦܬ ܡܶܠܬܳܟ? ܐܰܗܦܶܟ ܪܺܝܨܳܐ ܕsecurity add-generic-password … -w — -U ܟܳܬܶܒ ܥܰܠ ܕܰܡܢܳܩܰܕ ܩܰܝܳܡ. ܠܡܶܫܩܰܠ ܚܶܫܒܽܘܢܳܐ, jmapcli logout ܡܳܚܶܐ ܠܘܳܬ ܬܰܪܬܰܝܗܶܝܢ ܡܶܟܬܒܳܐ ܕܚܶܫܒܽܘܢܳܐ ܘܪܳܙܳܐ ܕܡܰܓܢܳܢܳܐ ܒܚܰܕ ܣܳܗܕܳܐ (--all ܡܰܟܶܐ ܟܽܠ ܚܶܫܒܽܘܢ̈ܐ).
— rotate
logout
3.3
ܠܟܽܠ ܡܰܟ̈ܝܢܬܳܐ ܡܶܢ ܬܽܘܩܳܢܳܐ
ܡܰܓܢܳܢܳܐ ܕܰܥܠܳܠܬܳܐ ܠܳܐ ܡܶܬܒܰܝܰܢ ܒiCloud — ܬܽܘܚܡܳܐ ܕܥܶܠ ܒܽܘܠܗܳܙܳܐ, ܐܳܦ ܡܶܠܬܳܟ ܠܳܐ ܢܳܦܩܳܐ ܡܶܢ ܡܰܟ̈ܝܢܬܳܐ ܕܟܬܰܒܬ ܥܠܶܝܗ̱. ܐܰܟܪܰܪ ܣܳܗܕܳܐ ܕsecurity ܚܰܕ ܙܰܒܢܳܐ ܠܟܽܠ ܡܰܟ̈ܝܢܬܳܐ; config.json ܡܶܫܟܰܚ ܪܳܗܶܛ ܒܓܰܘ ܟܰܣܳܐ ܡܙܰܘܓܳܐ ܡܶܛܽܠ ܕܠܳܐ ܢܳܛܰܪ ܪܳܙܳܐ.
— per
machine
Boogie