Skip to content

Client Secret is shown in the clear in the UI #4445

Closed
@mhottinger1

Description

Screen Shot 2020-07-10 at 4 03 58 PM

Stratos Version

Frontend Deployment type

  • Cloud Foundry Application (cf push)
  • Kubernetes, using a helm chart
  • Docker, single container deploying all components
  • npm run start
  • Other (please specify below)

Backend (Jet Stream) Deployment type

  • Cloud Foundry Application (cf push)
  • Kubernetes, using a helm chart
  • Docker, single container deploying all components
  • Other (please specify below)

Expected behaviour

When editing an endpoint in Stratos UI, the UI should mask my client secret so it's not exposed.

Actual behaviour

See that client secret is exposed in the clear.

Steps to reproduce the behaviour

Steps:
1.) Edit endpoint
2.) Check Update Client ID and Client Secret
3.) Input "Client Secret"

Log output covering before error and any error statements

Insert your log here

Detailed Description

Form field type change to use obfuscated.

Context

Because security.

Possible Implementation

Change field type to password?

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions