Add a use case driven guide on using Credential-stores to store passwords #2120
Conversation
| /subsystem=elytron/credential-store=myCredStore:add(location=mycredstore.cs, relative-to=jboss.server.config.dir, credential-reference={clear-text=StorePassword}, create=true) | ||
| ``` | ||
|
|
||
| If you navigate to WILDFLY_HOME/standalone/configuration, you will see a new file has been created there named mycredstore.cs. This file is used to store all the credentials in a credential-store. If you try to open it using Vim or another file viewer, you will see that the file is not human readable. As a result, the passwords are secured. It is possible to programmatically read the passwords, which is what WildFly does when dereferencing the credential reference to access a resource. |
There was a problem hiding this comment.
Just a minor suggestion, if you have the StorePassword (that was specified in clear text) then it is not secured just because it is human readable, and wildfly dereferencing is public code, so I would just remove the sentence: As a result, the passwords are secured. and leave the rest:
If you navigate to WILDFLY_HOME/standalone/configuration, you will see a new file has been created there named mycredstore.cs. This file is used to store all the credentials in a credential-store. If you try to open it using Vim or another file viewer, you will see that the file is not human readable. It is possible to programmatically read the passwords, which is what WildFly does when dereferencing the credential reference to access a resource.
| Notice how even though we specified the clear-text password when updating the credentials, it does not show up here. Instead, we can see the name of the credential-store and the alias listed under credential-reference. | ||
|
|
||
| == Remove Unused Credentials | ||
| If you are no longer using an and would like to remove it from the credential store, then you can do that using the following command: |
There was a problem hiding this comment.
s/If you are no longer using an and /If you are no longer using an alias and
No description provided.