You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the current scenario we have 2 ways to authenticate to server , either it should be supplied in plain text through config file , or user supply it through overrides options. if we doesn't supply it either way it raise an exception.
In both of these cases we are passing the password in plain text , As per our requirement we need to address this security gap and would prompt the password and mask it so it can be passed through secure channel .
As a proposed solution I believe that we can include this password prompt change in Configuration Class file which would have a logic for both the cases , overrides as well as for the config file.
This would prevent supplying password in the plain text for authentication.
Also one more change that would be needed in remote_factory to supply the correct override for pro_remote and oss_remote , so updated overrides Hash needs to be supplied for password to prompt only once.
In the current scenario we have 2 ways to authenticate to server , either it should be supplied in plain text through config file , or user supply it through overrides options. if we doesn't supply it either way it raise an exception.
In both of these cases we are passing the password in plain text , As per our requirement we need to address this security gap and would prompt the password and mask it so it can be passed through secure channel .
As a proposed solution I believe that we can include this password prompt change in Configuration Class file which would have a logic for both the cases , overrides as well as for the config file.
This would prevent supplying password in the plain text for authentication.
Also one more change that would be needed in remote_factory to supply the correct override for pro_remote and oss_remote , so updated overrides Hash needs to be supplied for password to prompt only once.
Github
The text was updated successfully, but these errors were encountered: