Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Store user data encoded #34

Open
EvilLord666 opened this issue Sep 28, 2023 · 2 comments
Open

Store user data encoded #34

EvilLord666 opened this issue Sep 28, 2023 · 2 comments
Assignees
@stdstring @YuriShang
Labels
security All issues related with users data security and application security
Milestone
Add support for F...

Comments

@EvilLord666
Copy link
Member

EvilLord666 commented Sep 28, 2023 •
edited
Loading

We should encode userdata for preventing it from access via getting access to data storage (Redis, File). Probably each user credentials should be stored as Base-64 encoded string, this feature should be taken into account in Ferrum CLI too
@EvilLord666 EvilLord666 added the security All issues related with users data security and application security label Sep 28, 2023
@stdstring
Copy link

@EvilLord666 Encoding into Base64 isn't safe by the nature. If we want to protect user data, we must encode/decode their with private/public keys.

@EvilLord666
Copy link
Member Author

base64 here means a way (format) how we string save in JSON, data itself should be encoded/decoded with some encryption key

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@stdstring stdstring

@YuriShang YuriShang

Labels
security All issues related with users data security and application security
Projects
Authorizarion server
Status: No status
Milestone
Add support for FederationService, Se...
Development

No branches or pull requests
3 participants
@stdstring @EvilLord666 @YuriShang