Export specific folders from cli or api as .kdbx

API & Customization issues
1

Hello everyone,

I would like to export specific folders as a .kdbx file with the CLI or the API. Is there a way to do this? I know folders can be exported from the GUI, but we would like to automate this for specific folders.

Thanks!

2

Hello @KuenzelIT and welcome to the forum!

Usually to do so, you can call the API from a script or so (doc is there), even though it’s doable, it’s not the easiest approach and you still have to export it in kdbx file in your script (it’s not doable via the API directly).

What you can do instead is to use the Go-Cli. It’s a contribution from the community and as far as I know, it was made with that specific need in mind.

3

Hey Steph,

thanks for your help!

Using the go-cli is not a problem, but it does not seem to be possible to export a specific folder with it. I’m going to ask there too.

How does passbolt create the KeePass file? Is that done in the browser extension, if it is not available in the API?

Thanks again!

4

Yes, it’s the extension that generates the kdbx file. The server is not able to decrypt the secret and we do not send it the decrypted secrets (it would be a security issue especially as we want to be end-to-end encrypted).

I checked the go-cli and its code source. I don’t see any way to filter the export to a specific folder. It actually takes all what the logged in user has access to and export it.

So, I would say that the easiest (IMO) for now would be to:

  • create a dedicated user in Passbolt
  • Share the folder to export with that new user
  • configure the go-cli to log in with this new user
  • run the export from the go-cli

Hope it helps