You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
When we navigate through the Wazuh App, the connection to the API is checked, this connection check is currently done using API details (user/pass/url/port) as plain text, this is wrong and we must hide this sensitive information.
The text was updated successfully, but these errors were encountered:
Update
Working on this branch: https://github.com/wazuh/wazuh-splunk/tree/3.10-issue-792
The API connection is now being checked using its ID and all the requests are now done in the back-end. e666293
The password is now hidden to the user: Problems encountered:
Some API requests are being performed multiple times in every transition, (e.g. cluster status, cluster and manager name) but one request should be enough.
Update
When the user clicks on settings and all APIs are loaded, we can see the API data including the password which should be hidden to the user.
This also happens when clicking "Set as default Manager" button:
Update
When checking the API connection, if there was any error (e.g. API stopped) the user was not notified of the problem and was being redirected to Settings tab.
Now an error toast have been added to let the user know that there is a problem with the API connection.
Description
When we navigate through the Wazuh App, the connection to the API is checked, this connection check is currently done using API details (user/pass/url/port) as plain text, this is wrong and we must hide this sensitive information.
The text was updated successfully, but these errors were encountered: