MFA does not function with STDIN password tools.

running lpass show --password Google returns just the password as a string of characters. running aws-google-auth --no-cache allows me to type in my password and then MFA token running lpass show --password Google | aws-google-auth --no-cache results in the errors below.

Running the command with the --save-failure-html option does not generate HTML pages that I have been able to locate.

lpass show --password Google | aws-google-auth --no-cache
Google Password:
ERROR:root:EOF when reading a line
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/aws_google_auth/__init__.py", line 72, in cli
    process_auth(args, config)
  File "/usr/local/lib/python2.7/site-packages/aws_google_auth/__init__.py", line 212, in process_auth
    google_client.do_login()
  File "/usr/local/lib/python2.7/site-packages/aws_google_auth/google.py", line 250, in do_login
    sess = self.handle_totp(sess)
  File "/usr/local/lib/python2.7/site-packages/aws_google_auth/google.py", line 598, in handle_totp
    mfa_token = input("MFA token: ") or None
EOFError: EOF when reading a line
MFA token: ⏎

[davidrjonas]

The solution I use (replace the 0’s with the ID of your lastpass entry),

~/bin/start-aws

#!/usr/bin/expect -f

set pw [exec lpass show --password 000000000]

spawn aws-google-auth --save-failure-html
expect "Google Password:"
send "$pw\r"
expect "MFA token:"
interact

[chrisjaimon2012]

the only MFA option i have configured is U2F, so is there any provision for me to default to a particular MFA method?