search

RESOStandards / web-api-commander

Client tools and libraries to work with and test RESO Web APIs.
https://commander.reso.org
Other
37 stars 18 forks source link

Add HMAC-SHA256 for configuration #90

Closed darnjo closed 2 years ago

darnjo commented 3 years ago

Currently, the Commander expects a plaintext, XML-based file containing configuration parameters for use during automated testing.

To improve security of these files in transit and at rest, a shared secret should be supported so that the configuration could be passed and then decoded in a cloud based process independently of their mechanisms for communicating sensitive content.

darnjo commented 2 years ago

This was taken care of with a Node library in https://github.com/RESOStandards/reso-certification-common