apache / apache/druid

encrypted secrets for lookups

Open
#13,925 0 comments 1 reaction 0 assignees View on GitHub
Area - Lookups Security
Dominant language
Java
Stars
14.1k
Forks
3.8k
Avg merge
2d 58m
Merged PRs (30d)
233

Description

Lookup database passwords can be easily revealed using `/druid/listen/v1/lookups` endpoint.
Is it possible to hide this somehow?

Contributor guide

Open the contributing guide

Research direction

Start at the `/druid/listen/v1/lookups` endpoint and trace how lookup database passwords are returned. Read the lookup endpoint and its response handling first; the work is done when passwords are no longer revealed through this endpoint while lookup functionality remains available.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
databases, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.