You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm wondering how the various note types (auth notes, user session notes and client notes) on AuthenticationSessionModel are persisted, and if it's "safe" to temporarily store sensitive information in them such as passwords, client secrets, etc... Are these in the database or just in memory / session cache somewhere?
Related to this other discussion I'm wondering if I can store the user's current password in there, so that as part of a change password operation I have access to the current/previous password which is needed as part of the external system I'm trying to integrate with. I can clear the note after fetching it later, but I just want to make sure it somehow doesn't end up as clear text somewhere I don't know about in the UI, database, logs, tokens, etc...
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I'm wondering how the various note types (auth notes, user session notes and client notes) on AuthenticationSessionModel are persisted, and if it's "safe" to temporarily store sensitive information in them such as passwords, client secrets, etc... Are these in the database or just in memory / session cache somewhere?
Related to this other discussion I'm wondering if I can store the user's current password in there, so that as part of a change password operation I have access to the current/previous password which is needed as part of the external system I'm trying to integrate with. I can clear the note after fetching it later, but I just want to make sure it somehow doesn't end up as clear text somewhere I don't know about in the UI, database, logs, tokens, etc...
All reactions