[jira] [Created] (SLING-13282) Support automatic decryption in Context-Aware Configurations

["Konrad Windszus (Jira)" <ji...@apache.org>]

Konrad Windszus created SLING-13282:
---------------------------------------

             Summary: Support automatic decryption in Context-Aware Configurations
                 Key: SLING-13282
                 URL: https://issues.apache.org/jira/browse/SLING-13282
             Project: Sling
          Issue Type: Improvement
    Affects Versions: Context-Aware Configuration Impl 1.7.2, Context-Aware Configuration API 1.3.0
            Reporter: Konrad Windszus


The high-level API described at https://sling.apache.org/documentation/bundles/context-aware-configuration/context-aware-configuration.html#context-aware-configurations relies on annotations to map a property to an underlying resource property: https://sling.apache.org/documentation/bundles/context-aware-configuration/context-aware-configuration.html#describe-configurations-via-annotation-classes.

Those should allow to optionally decrypt the underlying resource property while reading from the resource through https://sling.apache.org/documentation/bundles/commons-crypto.html#crypto-service. Either the annotation https://github.com/apache/sling-org-apache-sling-caconfig-api/blob/master/src/main/java/org/apache/sling/caconfig/annotation/Property.java could be extended with an additional boolean flag or one could use the existing {{properties}} element to use that.

This is useful for sensitive data (like passwords, API keys, ...) which is site specific (and therefore hard to store inside OSGi configurations) but should nevertheless not be stored in clear text in the underlying repository.





--
This message was sent by Atlassian Jira
(v8.20.10#820010)