area/weaknesshelp wantedkind/featureteam/core-clients
仓库指标
- 星标
- (34,398 个星标)
- PR 合并指标
- (平均合并 6天 19小时) (30 天内合并 384 个 PR)
描述
Description
Client credentials are currently stored as clear text. To improve Keycloak security, client credentials/secrets should be optionally be stored as hashes. A new pluggable SPI would be a great way to achieve this.
References:
- https://issues.redhat.com/browse/KEYCLOAK-10774
- https://github.com/keycloak/keycloak-community/blob/main/design/secure-credentials-store.md
Discussion
No response
Motivation
My Company, Transatel, is providing client credentials to our customers in order to use some of our APIs. These APIs give access to personal data, so, in order to respect the GDPR regulations, we must store these secrets in a secure way so that the secrets cannot be retrieved.
Details
No response