oauth2 icon indicating copy to clipboard operation
oauth2 copied to clipboard

Store client secret hashed in persistent store

Open legal-spot opened this issue 5 years ago • 3 comments

Hello, I have correctly implemented RedisStore for OAuth2 server implementation based on this library. However, checking Redis, I noticed the client_id and secrets are being stored in plain text. How can I force the library to store secrets securely (by hashing them with an algorithm such as SHA-1, SHA-256, Bcrypt, etc?

legal-spot avatar Oct 25 '20 14:10 legal-spot

is there an interface that I could implement to check the secret that the client sends ? Right now it has to be saved as plain text and that's not ideal

om26er avatar Jun 17 '23 09:06 om26er