DataFed icon indicating copy to clipboard operation
DataFed copied to clipboard

Symmetric Encryption for Globus Tokens

Open megatnt1122 opened this issue 10 months ago • 0 comments

[Desc] When a Globus token is created it is provided to the web server, which sends it to the core service, which then passes and stores it in the database as plaintext.

To add additional security we could store the tokens in an encrypted manner within the db. When a user needs to do a transfer, the core service will pull the token out of the db, decrypt it, then make a request to Globus.

megatnt1122 avatar Mar 17 '25 19:03 megatnt1122