Problem/motivation

I want secure tokens to be stored on the Drupal site so that I cannot see or fetch the keys manually, ensuring the security of sensitive information.

  • The system should use key_value_expire to store keys from the response provided by PKS or environment variables as an encrypted hash. The goal is that when a database is moved from environment to environment, the keys are invalidated due to missing the JWT hash, used to encrypt the data.
  • The key module must have methods that first attempt to fetch data from the cache when using the 'acquia' provider.
  • If no values are found in the cache, the system must attempt to fetch the data from the key service.
  • The stored tokens must be inaccessible to site administrators in plain text format.
  • If no value is found in PKS, attempt to fetch the value(s) from the environment variable, based on the module’s machine name.
Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

rajeshreeputra created an issue. See original summary.

rajeshreeputra’s picture

Status: Active » Closed (duplicate)
rajeshreeputra’s picture

Title: Update AcquiaConnectorMiddleware mock middleware to support PKS API. » Secure PKS tokens stored on the Drupal site
Issue summary: View changes
Status: Closed (duplicate) » Active

rajeshreeputra’s picture

Status: Active » Needs review

requesting review.

japerry made their first commit to this issue’s fork.

japerry’s picture

Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.