cloudfoundry / cloudfoundry/stratos

Hide customisable fields in the application variables tab

Open
#2,816 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

feature-request
Dominant language
TypeScript
Stars
267
Forks
137
Avg merge
5h 14m
Merged PRs (30d)
77

Description

Michael Stokes Aug 8th at 6:38 PM
One other feature request is in the services tab sometimes we have database connections and the json has passwords. We would like to see the password not sent over the network to the app or at least hidden in the front end. Put "password":"****" instead
If this was added as a feature to hide the password for everyone then maybe it could be turned on or off using a config option.

  • The application variables tab shows user provided variables (top list) and all variables in a code block.
  • Request is to blur out variables that are sensitive, such as password.
  • If done in the front end, suggest an admin only feature to configure field names to blur out.
  • If done in the back end, which would be more secure, need a new a new endpoint to proxy variable requests.
  • In both cases need some kind of way to store endpoint specific configuration and then configuration management in the front end

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are named. Start at the application variables tab and trace how the user-provided variables and full variable block are loaded; clarify whether masking belongs in the front end or behind a new endpoint, and how endpoint-specific configuration should be stored. Done requires sensitive field names to be configurable and masked without exposing passwords.

Written by the indexing model from the issue text.

Assessment

Tech stack
angular, typescript
Domain
frontend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.