ctmm-initiative / ctmmweb

Web app for analyzing animal tracking data, built upon ctmm R package
http://biology.umd.edu/movement.html
GNU General Public License v3.0
32 stars 21 forks source link

methods to save user name and password for movebank #4

Closed xhdong-umd closed 7 years ago

xhdong-umd commented 7 years ago
  1. we cannot save it in server because we don't have user registrations right now, we cannot recognize who is who. In the future if we add user registration for the Shiny app, we can save this more securely.
  2. that leaves two option:
    • one time input, good for one session.
    • save to user local environment.
    • html5 local storage. This only works in browser. Launching Shiny app from RStudio doesn't work, unless you click open in browser and switch to browser. The security level is not high, even if you encrypt the password. Do we want this?
    • user's personal Renviron file. This requires user to have R installed (they don't need R if running the app from cloud), and do some manual edits. The advantage is the information is saved more securely in user's personal folder. This is convenient once you have it setup, but it will not work with app in cloud.

This is a complex topic, need to balance between convenience and security. Fortunately our code is open source, theoretically user can check the code, run app from source code directly to be ensured what is running is what he saw.

For now, I'm using one time input and Renviron file option.