Bug 715 - [AMP][WEBUI][API] Get list devices API exposes the device RESTAPI and CLI password in plaintext
Review Request #221 — Created April 15, 2024 and submitted — Latest diff uploaded
| Information | |
|---|---|
| pmurugaiyan | |
| AMP | |
| amp_3_6 | |
| 715 | |
| Reviewers | |
| apoorva.sn, prajesh, shuinvy | |
Currenlt the REST APIs are exposing the console and RESTAPI passwords in plaintext as part the device details. To make our device data more secure made the passwords as None in the response. Now the current response strcuture is not modified, and also we are not exposing the sensitive data like the password. The user has to provide the password if they have to update the device configuration in future.
Changes are tested locally with lab AMP.