Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

API Keys are stored in plain text in the configuration screen #240

Closed
1 task done
lgrzegorski opened this issue May 30, 2023 · 0 comments · Fixed by #245
Closed
1 task done

API Keys are stored in plain text in the configuration screen #240

lgrzegorski opened this issue May 30, 2023 · 0 comments · Fixed by #245
Assignees
@bmarshall511
Labels
help wanted Extra attention is needed type:enhancement New feature or request.
Milestone
2.1.0

Comments

@lgrzegorski
Copy link

Is your enhancement related to a problem? Please describe.

Twitter API Keys are visible in the plugin configurations screen. In such cases, they might be easily stolen. Can we add a security layer to this functionality? A good example of how that might be implemented is WP to the Twitter plugin.

Designs

No response

Describe alternatives you've considered

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct
@lgrzegorski lgrzegorski added the type:enhancement New feature or request. label May 30, 2023
@jeffpaul jeffpaul added this to the 2.1.0 milestone May 30, 2023
@jeffpaul jeffpaul added the help wanted Extra attention is needed label May 30, 2023
bmarshall511 added a commit that referenced this issue Jun 20, 2023
@bmarshall511
feat(secure keys): made the saved twitter keys obfuscated in the ui, …
f656212 
…see #240
@bmarshall511 bmarshall511 self-assigned this Jun 20, 2023
@bmarshall511 bmarshall511 mentioned this issue Jun 20, 2023
Merged
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bmarshall511 bmarshall511

Labels
help wanted Extra attention is needed type:enhancement New feature or request.
Projects
Open Source Practice
Archived in project
Milestone
2.1.0
Development

Successfully merging a pull request may close this issue.

Made the saved Twitter keys obfuscated in the UI 10up/autoshare-for-twitter
3 participants
@bmarshall511 @jeffpaul @lgrzegorski