search

Wissance / Ferrum

Simple Go OpenId authorization server with Keycloak compatible API
https://wissance.github.io/Ferrum/
Apache License 2.0
6 stars 4 forks source link

Store user data encoded #34

Open EvilLord666 opened 1 year ago

EvilLord666 commented 1 year ago

We should encode userdata for preventing it from access via getting access to data storage (Redis, File). Probably each user credentials should be stored as Base-64 encoded string, this feature should be taken into account in Ferrum CLI too

stdstring commented 10 months ago

@EvilLord666 Encoding into Base64 isn't safe by the nature. If we want to protect user data, we must encode/decode their with private/public keys.

EvilLord666 commented 10 months ago

base64 here means a way (format) how we string save in JSON, data itself should be encoded/decoded with some encryption key