asetalias / amibot

A Whatsapp bot for Amizone. Powered by the go-amizone API
MIT License
25 stars 16 forks source link

[Feature] Encrypt user credentials at rest #41

Open ditsuke opened 1 year ago

ditsuke commented 1 year ago

Problem

We're storing user credentials in plain-text. This is less than ideal as a database breach would render them exposed.

Solution

Encrypt these credentials while storing, decrypt them while using. A secure symmetric algorithm like AES-256 should suffice.

Reference: https://github.com/asetalias/amibot/discussions/35