tmo-monitor icon indicating copy to clipboard operation
tmo-monitor copied to clipboard

Credential Reuse

Open highvolt-dev opened this issue 2 years ago • 0 comments

Provide method(s) for credentials to be re-used.

Because web api authentication uses hashing and app api authentication uses cleartext passwords, cannot simply just use hashed value.

Options include storing password in cleartext or encrypted at rest and providing the decryption key at runtime, e.g. with an environment variable. If storing in cleartext, should ensure read permissions are as strict as possible.

highvolt-dev avatar Oct 09 '21 13:10 highvolt-dev