dropwizard / dropwizard/dropwizard-cassandra
Provide a way to encrypt password in authProvider
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 4
- Forks
- 5
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 5
Description
Please provide a way to encrypt password in authProvider, maybe like this:
The authProvider then looks for a system property whose key is defined in systemPropertySecret for the value to decipher the password.
authProvider:
type: encryptedText
username: "myusername"
password: "{cipher}e3a055c901e71c12f0a2f762f30a561bfd01c97d5ecbb430698b99025560144a"
systemPropertySecret: SYS_PROPERTY_ENCRYPTION_KEY
In the production system, we really need the password to be encrypted.
Best Regards
Ha Nguyen
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the authProvider configuration entry point and review how password values are currently handled. Trace the requested systemPropertySecret lookup and deciphering behavior, then define tests for the example encrypted password and the production secret path; done means authProvider accepts the documented encrypted form without exposing the plaintext password.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cassandra, java
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100