Skip to content
This repository was archived by the owner on Nov 12, 2023. It is now read-only.
This repository was archived by the owner on Nov 12, 2023. It is now read-only.

Plain Text secrets and passwords to be encrypted in memory #6

Description

@godwinpinto

Feature:
Currently application takes plain text passwords in variables and keeps them as is during the lifecycle of application. This has security issue where passwords will be revealed during heap dump.
Note: this issue is related to application related secrets only.

Solution:
Use spring password encoders wherever secrets are involved and decode them for temporary use where applicable and clear them / they get cleared due to variable scope completion.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions