Skip to content

Hide the API Secret in a password field #407

Closed

Description

@thebookins

The Nightscout API Secret in Loop is visible in the unhashed form. Since NS Care Portal is quite powerful (e.g. for users of OpenAPS who set temp targets remotely) it would be nice if the API Secret text field was secure (dots for the characters). Also, the API Secret could be hashed and only the hashed version stored within Loop.

image

Activity

  1. Kdisimone commented on Mar 22, 2017

    @Kdisimone
    Collaborator

    There is a way for NS users to retrieve their hashed API already...we could also change the field to that entry. Although, it would have the downside of making people do something semi-technical (opening up a console view in a browser and finding their hashed API in the settings)

  2. trixing commented on Mar 22, 2017

    @trixing
  3. Kdisimone commented on Oct 18, 2018

    @Kdisimone
    Collaborator

    I will add a customization instruction to the Loopdocs to let people choose whether their API secret is displayed or not...easy change on this line

  4. thebookins commented on Oct 18, 2018

    @thebookins
    ContributorAuthor

    Thanks Katie!

  5. Kdisimone commented on Oct 14, 2019

    @Kdisimone
    Collaborator
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions