Re: [Dev] Avoid the hard coding the password in password callback handlers

Hi Isura, As discussed offline lets store the password in a property in the registry and access it using the registry service. The following blog post [1] shows how you can use the registry OSGi service to access the registry using the scr plugin. [1]

Re: [Dev] Avoid the hard coding the password in password callback handlers

I think, either you can store the password in a config file and encrypt that using secure vault, and in the PWCB Handler it can be read using the secret key [1] [1] http://ajithvblogs.blogspot.com/2014/01/secure-custom-configuration-filexml.html Thanks, Sajith On Thu, Jun 26, 2014 at 11:32

[Dev] Avoid the hard coding the password in password callback handlers

Hi, Is there any way to avoid the hard coding the password in password callback handlers? Can we use registry to store password? Thanks -- Isura Dilhara Karunaratne Software Engineer Mob +94 772 254 810 ___ Dev mailing list Dev@wso2.org