-
Notifications
You must be signed in to change notification settings - Fork 47
Labels
component/dashboardcomponent/dbIssue that includes one or more db migrationsIssue that includes one or more db migrations
Milestone
Description
The client secret is currently stored on database without any encryption, then it should be hashed for security reasons.
This means that the API must ignore any secret received during the creation/update of a client, generate it on POST creation requests and provide it to the user/dashboard one time in the relative response.
If the client's owner loses his client secret, the dashboard will provide him a button to invalidate the current one and generate a new one (returned in the response).
Within the database, the client secret column type won't change but it will be stored as a bcrypt hash instead.
A proper migration that encrypts current client secrets is necessary.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
component/dashboardcomponent/dbIssue that includes one or more db migrationsIssue that includes one or more db migrations
Type
Projects
Status
In Progress