loopback icon indicating copy to clipboard operation
loopback copied to clipboard

avoid hardcoded password in config file

Open wangsenyan opened this issue 4 years ago • 1 comments

Suggestion

Hi,is there any way to avoid hardcoded password in config file or datasource file ?

for example:

i set encrypted password in config file,

when loopback boot, it auto automatic decryption,

So even if my files are leaked, my password is still safe

thanks

wangsenyan avatar Nov 25 '21 13:11 wangsenyan

One way to solve this problem is to transmit password through env variables. In that way, no password are stored in your code. Take at dotenvext npm.

arnaud16571542 avatar Feb 20 '22 11:02 arnaud16571542