WorldHealthOrganization / godata-dhis2-interop-app

DHIS2-based application to enable secure and flexible metadata exchange between DHIS2 and Go.Data.
0 stars 5 forks source link

Utilize Personal Access Token vs. username/pw #17

Open sarahollis opened 2 years ago

sarahollis commented 2 years ago

The app still requires the user to enter a DHIS2 server, username, and password, which as previously mentioned is less secure than using the existing session connected to the DHIS2 instance where the app is installed. It would be much better to remove the dhis2 configuration and just request data directly from the local DHIS2 instance. If communicating with an external DHIS2 server it is strongly recommended to support and prefer Personal Access Tokens instead of usernames and passwords. cc @silviaemorreale @metabig

sarahollis commented 2 years ago

per discussion with @petarjov this was a feature not a bug, in order to allow for connection with other DHIS2 instances, not the current one.