View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0006720 | libeufin | other | public | 2021-01-24 14:32 | 2023-01-08 10:32 |
| Reporter | Florian Dold | Assigned To | MS | ||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Target Version | 0.9.0 | Fixed in Version | 0.9.0 | ||
| Summary | 0006720: nexus and sandbox should support getting the DB connection string from an environment variable | ||||
| Description | Otherwise, the DB credentials might be leaked to other users. We could also use a configuration file, but it is probably overkill for just one setting. | ||||
| Tags | No tags attached. | ||||
|
|
DB connection string can be read from LIBEUFIN_{SANDBOX,NEXUS}_DB_CONNECTION. Note that the command line way is still an option. |
|
|
This change: 90d2a60..c8d3cde, removes the command line parameter to set the connection string. It got too unnecessarily complicated to check that at least _one_ method defined the connection string. And after all, it prevents programmatically the leakage of the DB's credentials. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2021-01-24 14:32 | Florian Dold | New Issue | |
| 2021-01-24 14:32 | Florian Dold | Status | new => assigned |
| 2021-01-24 14:32 | Florian Dold | Assigned To | => MS |
| 2021-01-26 19:11 | MS | Status | assigned => resolved |
| 2021-01-26 19:11 | MS | Resolution | open => fixed |
| 2021-01-26 19:11 | MS | Note Added: 0017396 | |
| 2021-01-27 13:41 | MS | Note Added: 0017412 | |
| 2021-01-29 15:23 | ttn | Relationship added | related to 0006695 |
| 2023-01-08 10:31 | Christian Grothoff | Fixed in Version | => 0.9.0 |
| 2023-01-08 10:31 | Christian Grothoff | Target Version | => 0.9.0 |
| 2023-01-08 10:32 | Christian Grothoff | Status | resolved => closed |
