View Issue Details

IDProjectCategoryView StatusLast Update
0006720libeufinotherpublic2021-01-29 15:23
ReporterFlorian Dold Assigned ToMS  
PrioritynormalSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Summary0006720: nexus and sandbox should support getting the DB connection string from an environment variable
DescriptionOtherwise, the DB credentials might be leaked to other users.

We could also use a configuration file, but it is probably overkill for just one setting.
TagsNo tags attached.


related to 0006695 closedttn Taler review/edit the LibEuFin How-To 



2021-01-26 19:11

manager   ~0017396

DB connection string can be read from LIBEUFIN_{SANDBOX,NEXUS}_DB_CONNECTION. Note that the command line way is still an option.


2021-01-27 13:41

manager   ~0017412

This change: 90d2a60..c8d3cde, removes the command line parameter to set the connection string.
It got too unnecessarily complicated to check that at least _one_ method defined the connection string.
And after all, it prevents programmatically the leakage of the DB's credentials.

Issue History

Date Modified Username Field Change
2021-01-24 14:32 Florian Dold New Issue
2021-01-24 14:32 Florian Dold Status new => assigned
2021-01-24 14:32 Florian Dold Assigned To => MS
2021-01-26 19:11 MS Status assigned => resolved
2021-01-26 19:11 MS Resolution open => fixed
2021-01-26 19:11 MS Note Added: 0017396
2021-01-27 13:41 MS Note Added: 0017412
2021-01-29 15:23 ttn Relationship added related to 0006695