Encrypt API password and token

cultiv8 - May 30, 2009 - 07:33
Project:Salesforce
Version:6.x-2.x-dev
Component:Code
Category:feature request
Priority:normal
Assigned:Unassigned
Status:needs work
Description

Currently, salesforce_api_password & salesforce_api_token are currently saved as plain text passwords in the variable table. Is it possible to hash those values?

#1

rbora - May 31, 2009 - 08:43

Actually, I was just about to request this hashing myself (preferably a strong/secure hash). I imagine this is a real quickie feature request, best done by JoshK/Aaron/Bevan.

However, if not, I could have a different "credential encryption module" (that I had produced for the Ubercart Authorize.net CIM module) re-purposed into an add-on for this module. This add-on module would be called "Salesforce API Encryption" or something. Having a whole separate little module for this feature might be overkill-- but if you decide you want this help, I will have it done asap.

#2

Bevan - July 31, 2009 - 08:30
Title:More secure salesforce_api_passowrd & salesforce_api_token» Encrypt API password and token
Status:active» needs work

Patches welcome as well as integration with other modules providing this API

 
 

Drupal is a registered trademark of Dries Buytaert.