Problem/Motivation

While the module does not display Brandfolder API keys on its config form, the keys are stored using Drupal's config system. While config files should be stored outside a site's web root, they are typically tracked in version control, and these keys will also be tracked by default. This is not optimal, security-wise.

Proposed resolution

Use the Key module to store Brandfolder API keys, so users can easily configure their preferred key storage method.

Remaining tasks

Update Brandfolder config form and all code that currently pulls keys from config.
@see https://www.drupal.org/docs/contributed-modules/key/developer-guide

User interface changes

Key selection options on Brandfolder config form.

API changes

None.

Data model changes

New key storage and retrieval, internally.

Comments

ndewhurst created an issue. See original summary.

  • ndewhurst committed 083eb4f8 on 6.0.x
    Issue #3465322 #3428293. Drupal 11. Key module for API keys. Etc.
    
    Use...

  • ndewhurst committed 5ff5cdbe on 6.0.x
    Issue #3465322 auto-install Key module. Improve config form logic.
    
ndewhurst’s picture

Version: 5.0.x-dev » 6.0.x-dev
Status: Needs work » Fixed

Key module integration was added in 6.x

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.