token secret is written to yaml file in plaintext

Smartling / smartling-cli

Smartling-cli is a library and CLI tool for managing Smartling projects. See the project's Wiki for user documentation.

https://github.com/Smartling/smartling-cli/wiki

MIT License

16 stars 9 forks source link

token secret is written to yaml file in plaintext #33

Closed enegron-sl closed 7 years ago

enegron-sl commented 7 years ago

isn't this a security concern?

dimitrystd commented 7 years ago

Well, i did some research but didn't find how we can encrypt data when everything on clients side (data; application). I mean we can add some encryption but it will require some input from user. So don't see any sense in this. User has following options:

put config into his home dir
don't put credentials into config and pass them in the command line for each request
use env variables

Let me know if you have better ideas.