bajo1207 / piggymetrics

Microservice Architecture with Spring Boot, Spring Cloud and Docker

https://piggymetrics.tk

Other

0 stars 0 forks source link

How should we save account credentials? #16

Open jblossey opened 4 years ago

jblossey commented 4 years ago

Explanation

(also relates to #10) In order to retrieve an Oauth2 Token, we need to store the specific client_id and the client's secret. We retrieve those when the client logs into paypal and allows our app to retrieve certain information. The alternative to this stateful part of course would be to let our client have no "remember me" function.

jblossey commented 4 years ago

If we save for use-time only, we could use the cookie or session functions provided by CherryPy.
If we want to offer convenience functions to keep credentials in some kind of dedicated save space, we would need a DB-like unit (with security features built inside by design).

jblossey commented 4 years ago

For Test purposes we can at first simply take all credentials from the PayPal Sandbox accounts and hardcode them. Once we enable something similar to a real-world scenario we have to get through the authentication process.

jblossey commented 4 years ago

Topic to be discussed on Discord Sprint meeting on Dec. 30th, 2019

jblossey commented 4 years ago

Related to #18 Currently Account credentials aren't saved at all.