search

c12i / mpesa-rust

A MPESA API sdk in Rust
https://c12i.github.io/mpesa-rust/mpesa/index.html
MIT License
43 stars 14 forks source link

Mask client secret and initiator password in debug #77

Closed c12i closed 10 months ago

c12i commented 10 months ago

Prevent client secret and initiator password visibility in Mpesa client debug

itsyaasir commented 10 months ago

Hey Collins, I think there's another approach to hide the secret key, we can derive manual Debug on the MpesaClient debug and remove the fields from there.

c12i commented 10 months ago

Hey Collins, I think there's another approach to hide the secret key, we can derive manual Debug on the MpesaClient debug and remove the fields from there.

Thought of this too, but the secrecy crate provides the ability to wipe the secrets from memory on drop securely, this was the main reason I chose to go with the crate

itsyaasir commented 10 months ago

Hey Collins, I think there's another approach to hide the secret key, we can derive manual Debug on the MpesaClient debug and remove the fields from there.

Thought of this too, but the secrecy crate provides the ability to wipe the secrets from memory on drop securely, this was the main reason I chose to go with the crate

That is great, We can go for this