ibm mobilefirst - IBM Worklight 6.1 - WL.Server.setActiveUser credentials, is it secure? -


SetActiveUser () .

How & amp; Where UIO is stored on the WL server, and is it considered a safe storage?

In this framework, trying to understand the effect of the password protection of passwords and later used for back-end access (cloud) requests. If not safe, then can encryption be applied to any part of the UIO?

Appreciate what you can give.

The user identity object is kept in memory and scotched in the current session. In other words, credentials are not constant; Someone has to dump the server memory and dig through it or connect to the debugger. It is believed that the production server should also run in a safe environment, with limited access to the process, etc. ... of course.

The stored credentials in this object can be used by the adapter to authenticate with the back send from the user.

  • In an HTTP adapter, the basic, digest, and NTLM authentication schemes use that technology
  • In the non-HTTP adapter and in the custom authentication schemes, the developer will need those credentials Could use.

Comments

Popular posts from this blog

import - Python ImportError: No module named wmi -

Editing Python Class in Shell and SQLAlchemy -

c# - MySQL Parameterized Select Query joining tables issue -