DataFed
DataFed copied to clipboard
Symmetric Encryption for Globus Tokens
[Desc] When a Globus token is created it is provided to the web server, which sends it to the core service, which then passes and stores it in the database as plaintext.
To add additional security we could store the tokens in an encrypted manner within the db. When a user needs to do a transfer, the core service will pull the token out of the db, decrypt it, then make a request to Globus.