Securing a Spring boot api rest service

Question

I have a spring boot api secured with spring basic security. I call the api from another application. So I currently have the password in plain text in the application.yml files of my api and also the application.yml file from which I am calling the service.

How can I avoid having it in plain text in the yml? is there a way to have an encrypted password in both yml files?

Maybe a vault solution is what you are looking for: http://projects.spring.io/spring-vault/ — git-flo, Aug 17 '18 at 08:54

score 0 · Answer 1 · answered Aug 17 '18 at 13:29

0

I ended up using Jasypt (Java Simplified Encryption). This was very helpful

answered Aug 17 '18 at 13:29

The Reedemed77

419
1
6
14

Securing a Spring boot api rest service

1 Answers1