How is app key and secret stored? Is it encrypted?

[asurajpai]

Hi,

How is app key and secret stored? Is it encrypted?

If it is stored in the Cassandra database, is it stored as a plain text or is encrypted.

Please let know the steps to view the same.

BR, Suraj

[sudheendras]

Hi @asurajpai They are not encrypted. You can view them by logging into the Cassandra database using cqlsh commands.

[billzabaronick]

@sudheendras which commands? which table in the database?

Thanks.

[chewyuliang]

Hi

1. Has this been mitigated?

2. What is the solution to this?

[hareeshkuttiyat]

It is unfortunate that this is still not unanswered as this is a basic expectation to be able to store the password hash instead of storing in plain text. I really hope Apigee does something about this soon.