Passing Sensitive Information from a Workflow to a Worker about conductor HOT 4 CLOSED

The worker and server communication is done over the REST endpoints.
You can configure your tomcat/servlet engine to use HTTPS and use the HTTPS endpoint for the workers to communicate with the server.

from conductor.

Thanks for your comments.

Using HTTPS would surely help to establish a secure connection between the server and the workers.

But when I use inputParameters to pass on usernames/password, I can see those inputParameters in cleartext in the WebUI - which is not that nice (as everybody with access to the WebUI could see the passwords).

Is there any way to work around this issue in the WebUI?
Maybe some feature like: "sensitiveInputParameters" where values don't get displayed in the WebUI and values cannot be extracted otherwise?

from conductor.

Having parameters classified as "sensitive" could be a solution to this. There is no current workaround, but I would think if there are sensitive parameters, you might want to pass around them in encrypted fashion and let the worker decrypt and it use it. This way, they are protected on the wire, in the workflow's execution store and UI. Only the Worker who is able to interpret them will be able to decode and use it.

from conductor.

Yes, that's a nice way to go. Thanks for pointing out this proposal.

from conductor.