encrypted secrets for lookups
Open
Area - Lookups
Security
- Dominant language
- Java
- Stars
- 14.1k
- Forks
- 3.8k
- Avg merge
- 2d 58m
- Merged PRs (30d)
- 233
Description
Lookup database passwords can be easily revealed using `/druid/listen/v1/lookups` endpoint.
Is it possible to hide this somehow?
Contributor guide
Research direction
Start at the `/druid/listen/v1/lookups` endpoint and trace how lookup database passwords are returned. Read the lookup endpoint and its response handling first; the work is done when passwords are no longer revealed through this endpoint while lookup functionality remains available.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- databases, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100