Obfuscate repository passwords (#1192)

Wojciech Kapcia (Tigase) opened 5 years ago

Currently it was done in SchemaLoader (#issue #1187) but it would be good idea to take it further (especially if JDBC string may be passed as environment variable):

obfuscate it in logs when starting server
obfuscate in config-dump.properties file

Related
- SchemaLoader should not print passwords in the logs (URL logs) (#1187) Closed

Activities

Wojciech Kapcia (Tigase) commented 4 years ago
Added JDBC URL obfuscator utility and used it during schema-upgrade/instlal as well during server startup

Added new parameter to @ConfigField annotation specifying type of the configuration option (Plain/Password/JdbcUrl) and obfuscating it accordingly in config-dump.
Login to comment

Type	Task
Priority	Normal
Assignee	Wojciech Kapcia (Tigase)
Version	tigase-server-8.2.0
Spent time	0

Issue Votes (0)

Watchers (0)

Reference

tigase/_server/server-core#1192