Closed mmopitz closed 3 years ago
Update: We figured a way out. Using the nodeProcess-field in the legacy-api we were able to to supply the password via stdin:
window.neo4jDesktopApi.executeJava(parameters)
.then(process=> {
process.nodeProcess.stdin.setEncoding = 'utf-8';
process.nodeProcess.stdin.write(password);
process.nodeProcess.stdin.end();
return process;
})
Hi there, I'm currently in the midst of developing a graph-app for neo4j desktop.
What I want to do is:
All of that works just fine! But currently my graph-app passes the server's credentials via command line to the background-process. This means that while my background-process is running, the credentials are visible in the process list. From a security point of view this is of course a nightmare (see attached screenshot)
Do you have any recommendations/best-practices on how to handle credentials in such a scenario? My first instinct was to pass the password via the background-proces's stdin. But I didn't find any documentation on how to achieve this.
Side Note: For project management reasons I can't pull the logic from the java-background-process into the graph-app. I also can't put the logic into a neo4j-plugin.