How to properly store login and password for use with API?

I

ikutin2019-04-13 17:56:45

API

ikutin, 2019-04-13 17:56:45

There is a service where the user registers, this service has its own APIs, the APIs are tied to this user, therefore, each time a request is sent, it is required to transfer the login and password in clear text, there is no additional protection from the service side, how to properly store this login and server side password?

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

I

Ivan Shumov, 2019-04-13
@ikutin

Use openId with jwt tokens. And you will be happy. As for storage, I would look towards keycloak. Everything is stored in encrypted form, but given to the right user in normal

A

abmanimenja, 2019-04-13
@abmanimenja

Why is there a password and login?
Enough token.

S

sim3x, 2019-04-13
@sim3x

How to store user passwords?