Extract "sessions" from `userdata/jsondb/users.json` and store them in standalone `userdata/jsondb/sessions.json`

openhab / openhab-core

Core framework of openHAB

https://www.openhab.org/

Eclipse Public License 2.0

914 stars 422 forks source link

Extract "sessions" from `userdata/jsondb/users.json` and store them in standalone `userdata/jsondb/sessions.json` #3462

Open RafaelKa opened 1 year ago

RafaelKa commented 1 year ago

As an user of OpenHab I want to manage the OpenHab-App settings by Git(basic IaC variant), to be able to deploy and test the fetures and settings on non production stage Hosts.

The userdata/jsondb/users.json file MUST NOT contain "sessions" data, because the "sessions":

are to frequently written
contain plain text secret data, which MUST NOT end up in commits
etc.

By extracting the "sessions" to standalone file, the "users" can be handled by IaC tools much simpler.

splatch commented 1 year ago

To my observation it seems that sessions are actually never, or very rarely, cleaned up.