3 ms·
We don't have admins that can do everything. A super admin would be a single point where hackers would focus on. these micro secrets are a bit better since you
by stop50 4y ago
We don't have admins that can do everything.
A super admin would be a single point where hackers would focus on.
these micro secrets are a bit better since you usually can add limits to them about what they can do. Some also have an log who accessed what when.
i understood that you add the admin with a migration. So effectivly you create a lot of admins that share the username and password. The least you can do is to document it and hve it especially in the codebase salted and hashed.
An software for saving credentials would be the most useful when you are building and packaging the software for the systems.the codebase itself would have only an placeholder for the username and the password and only in the process of the build the username and password is loaded, the later hashed and replacing the placeholders. This way even your codebase doesn't have the password and you can rotate the password without having old ones in your codebase lingering.