Uploaded image for project: 'AeroGear'
  1. AeroGear
  2. AEROGEAR-6986 Admin UI overhaul
  3. AEROGEAR-7054

Admin UI - do not reveal passphrase for iOS certificate in the UI and REST interface

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Done
    • Major
    • None
    • None
    • None

    Description

      Note: this affects new Angular-based Admin UI

      Currently, JSON response from server contains plain passphrase as provided during addition of the iOS variant.

      In order to prevent stealing this passphrase through admin UI, we should trim the passphrase from the response and make the field input[type=password].

      Attachments

        Issue Links

          relates to

          Feature Request - Feature requests from customers and/or users AEROGEAR-7146 Add a JAX-RS interceptor to strip the passphrase from response entities

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              lfryc Lukáš Fryč (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: