-
Notifications
You must be signed in to change notification settings - Fork 53
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ansible tokens stored in plaintext #1221
Labels
Comments
mdellweg
added a commit
to mdellweg/pulp_ansible
that referenced
this issue
Sep 1, 2022
mdellweg
added a commit
to mdellweg/pulp_ansible
that referenced
this issue
Sep 5, 2022
mdellweg
added a commit
to mdellweg/pulp_ansible
that referenced
this issue
Sep 5, 2022
mdellweg
added a commit
to mdellweg/pulp_ansible
that referenced
this issue
Sep 7, 2022
mdellweg
added a commit
that referenced
this issue
Nov 16, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field (https://github.com/pulp/pulp_ansible/blob/main/pulp_ansible/app/models.py#L234) and exposes them in read/write mode via the API (https://github.com/pulp/pulp_ansible/blob/main/pulp_ansible/app/serializers.py#L170) instead of marking it as write only.
The text was updated successfully, but these errors were encountered: