Python script for creating a Password Revision Date Report using the CLI

Ask the Community Password Manager
,
1 
# Script to create a report of when passwords were last revised in the vault
import subprocess
import json
import csv

# setup
session_key = input('Input session key: ') # bw session key
org_id = input('Input Org ID: ') # org ID
bw = ['./bw', '--session', session_key]

with open('report.csv', 'w', newline='') as csvfile:
  # define a writer function to write to .csv files
  reportWriter = csv.writer(csvfile, delimiter = ',', quotechar=' ', quoting=csv.QUOTE_MINIMAL)
  # get all items + orgID flag from CLI tool
  items = subprocess.run(bw + ['list', 'items', '--organizationid', org_id], stdout=subprocess.PIPE)
  # convert to json
  items = json.loads(items.stdout.decode("utf-8"))

  # write csv headers
  reportWriter.writerow(['Item_Name', 'Item_ID', 'Password_Revision_Date'])

  # write items with password revision dates
  for item in items:
    id = (str(item['id']) + ', ')
    name = (str(item['name']) + ', ')
    revisionDate = (str(item['login']['passwordRevisionDate']))
    rowData = ( name + id + revisionDate)
    reportWriter.writerow([rowData])
2

Thanks for this, I have been trying to create a new report to list items with the password revision date. The end goal to identify the passwords I haven’t changed since the LP breach.
Never knew I could use the CLI like this :+1:

One small issue, the script seems to blow up when it encounters a ‘secure note’. :cry: (these item objects have no login element of course)

Oh and I executed it as a Python script so if it isn’t then that’s where I went wrong :crazy_face:

3

I took the liberty of revising the topic title to read Python script for creating a Password Revision Date Report using the CLI (was: Create a report of when passwords were last revised in the vault using the CLI).

5

My workaround that worked for me :+1:

  # write items with password revision dates
  for item in items:
    id = (str(item['id']) + ', ')
    name = (str(item['name']) + ', ')
    try:
       revisionDate = (str(item['login']['passwordRevisionDate']))
       rowData = ( name + id + revisionDate)
       reportWriter.writerow([rowData])
    except:
       print('missing password item')