New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Client's Secret stored as plain text #110

Open

KamilKubicki opened this issue Nov 16, 2022 · 0 comments

KamilKubicki commented Nov 16, 2022

Hi,

in Symfony 5 ecosystem using Doctrine persistance, client secrets seem to be stored as a plain text. That can become an important security issue.

This problem was raised here:
trikoder/oauth2-bundle#38

The problem is solved under Laravel implementation:
https://laravel.com/docs/9.x/passport#client-secret-hashing

What would be the solution for Symfony? Please advise.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment