search

instructure / demo_arigato

Populates a Canvas demo site with dummy data
http://demoarigato.herokuapp.com
GNU Affero General Public License v3.0
2 stars 5 forks source link

Encrypt OAuth Keys #34

Closed thedannywahl closed 6 years ago

thedannywahl commented 6 years ago

OAuth keys shouldn't be stored as plain text in the DB. We need to at least hash them and then unhash on read, until we can fix #8

davidhowls commented 6 years ago

From latest release: all tokens are now encrypted using attr_encrypted gem.