encryption of client configuration plugin.

[Mahmmoud Rashed]

Hello There, Is there a way to encrypt the plugin configurations? When working with multiple payment gateways they all check for the way the data is stored in database, and our data is stored plain text. 

Is there any thought in the future for this? As it is critical to comply with multiple security practices, where the payment gateway data should always be encrypted.


Regards.

[Mahmmoud Rashed]

Hello Dears, Any consideration about this? If there are some thoughts or a specific system design to implement this, but with no time, I can help and push a PR, if I just knew the system design planned for this feature.

[Pierre-Alexandre Meyer]

Hello,

This is currently not on our roadmap. Could you use encryption at rest features from your database?

Otherwise, decryption would need to happen here: https://github.com/killbill/killbill-plugin-framework-java/blob/356f49e371ce8c3b8dba80da79d6f6f1dabd6636/src/main/java/org/killbill/billing/plugin/api/notification/PluginConfigurationHandler.java#L102

You could maybe do something similar to what Kill Bill core does for core properties, using Jasypt: https://github.com/killbill/killbill-platform/blob/475772802e5ad08afbadbfe6e2ecb94da2210747/base/src/main/java/org/killbill/billing/platform/config/DefaultKillbillConfigSource.java#L255

--
You received this message because you are subscribed to the Google Groups "Kill Bill users mailing-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to killbilling-us...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/killbilling-users/2bc3892e-b35f-4994-9c66-5fabe83eeed3n%40googlegroups.com.

--

Pierre