Added DeckPass Submodule

[Teppichseite]

Add DeckPass to Plugin Store

DeckPass allows to manage and paste passwords directly in SteamOS gaming mode. Internally it uses KeePassXC.

Currently no other Decky plugin was made to specifically serve the purpose of managing and accessing passwords.

Features:

1. Opens any existing KDBX database file supported by KeePassXC
2. Access and paste credentials into games
3. Create, edit and remove entries
4. Create new databases directly
5. Open KeePassXC Application via shortcut

More Screenshots

Security consideration
Since the purpose of this plugin is to access and use credentials certain security considerations have been followed:

1. DeckPass itself only serves as a frontend for the the KeePassXC CLI program which is kept open as subprocess as long as a database is opened
2. DeckPass does not store any credentials persistently itself
3. DeckPass passes the database password directly to the KeePassXC CLI program and does not keep it additionally in memory
4. DeckPass keeps credentials for viewing or pasting only as long as necessary for the operation itself in memory
5. The pasting operation is realized via simulating Steam Device Keyboard input since it is more reliable than copy/pasting to the clipboard, therefore the credentials are not kept clipboard memory
6. After opening a database, DeckPass is keeping a temporary security token as scoped variable in the JavaScript module of the plugin. This token is an additional mesure to limit the access to the opened database on application level
7. More detailed security considerations and detailed flow of operations can be read in the Readme of the project

Task Checklist

Developer

• I am the original author or an authorized maintainer of this plugin.
• I have abided by the licenses of the libraries I am utilizing, including attaching license notices where appropriate.

Plugin

• I have verified that my plugin works properly on the Stable and Beta update channels of SteamOS.
  1. I use a device with Bazzite but I got support from the community on Discord for testing on SteamOS Stable channel
     • SteamOS Stable Channel report: Test DeckPass on SteamOS Teppichseite/DeckPass#2 (comment)
     • Bazzite Testing Channel report: Test DeckPass on Bazzite Teppichseite/DeckPass#3 (comment)
• I have verified my plugin is unique or provides more/alternative functionality to a plugin already on the store.

Backend

• No: I am using a custom backend other than Python.
• Yes: I am using a tool or software from a 3rd party FOSS project that does not have it's dependencies statically linked.
• No: I am using a custom binary that has all of it's dependencies statically linked.

Community

• I have tested and left feedback on two other pull requests for new or updating plugins.
• I have commented links to my testing report in this PR.

Testing

• Tested by a third party on SteamOS Stable or Beta update channel.

[github-actions]

Issues Found

No issues with your PR description were found.

Next Steps

1. If we found any issues above, please edit your pull request description to resolve them and leave a comment saying you've done so.
2. For the quickest review, please see the Community section of the pull request template for how you can help other developers.
3. Once your description is correct, a maintainer will review your pull request as soon as possible.

Thank you for your contribution! If you need any help, please reach out on our Discord server. ❤️

[beebls]

Code all looks good to me, thanks for reviewing other plugins, off to the testing store

[github-actions]

This pull request is stale as no updates or testing reports have been posted within the last 7 days. Please ensure you are actively recruiting testers or resolving the issues discussed. If you do not remove the stale label or comment, this will be closed in 7 days. Please close this pull request if you need more time to resolve issues so we can keep our repo healthy.

[grimkor]

Plugin Testing Report

Installed Plugins

• decky-file-server - 1.2.0
• decky-framegen - 0.11.15
• decky-lsfg-vk - 0.12.2
• decky-syncthing - 0.2.7
• decky-undervolt - 1.0.8
• museck version - 0.0.1-52b3db0
• Shotty version - 0.1.0

Specifications

• SteamOS 3.7.20 (Beta)
• Steam 1769025840 (Stable)
• Decky v3.2.1 (Stable)

Issues

Has the following minor non-blocking issue(s):

When unlocking the database using the wrong password does not show any feedback that there was a problem. Took a minute for me to realise that I was not waiting for the plugin to update and that the password was wrong.

Summary

Works fine once I got into the database, could add in details and paste them. Doesn't support TOTP and not sure if that is something you want to support.