config.properties file exposes API key and TRS user credentials in the open

[jamsden]

This file should be stored in a secure place on a sample server.

apiKey and user credentials - should be encrypted.

• Need to create a utility program to encrypt the password:

import com.ibm.team.repository.common.util.ObfuscationHelper;
// use this to encrypt the apiKey and TRS user's password to put in config.properties
encryptedPassword = ObfuscationHelper.encryptString(password) 
System.out.println(encryptedPassword)

• Then use this to decrypt the password stored in the config.properties file

password = ObfuscationHelper.decryptString((String)clientProperties.getProperty("password"));