Let’s say I have an app that handles ordering bubble gum for clients. Each client has their own API credentials for the bubble gum supplier. I handle placing orders for more bubble gum by sending an order request using the client’s API keys. When I had one client I stored their API creds as an ENV a…

Encrypting is fine, though if you want what’s generally regarded as high security if it’s really that important then I use Consul by Hashicorp, it’s exceedingly powerful for holding encrypted data like access tokens. Encrypting in the database is “fine” but where you hold the decryption key really …

Are you referring to Cloak.Ecto hexdocs ? If so, I don’t think I just want it encrypted in the DB. My fear with that would be the Account info would be accidentally preloaded or otherwise pulled from the DB and thrown around the code base where not needed. So, i like the idea of having to intentional…

I think that redacting the field would address your concerns.

Elixir Programming Language Forum

Storing API credentials in DB

Questions & Help Questions

stefanchrobot March 2, 2022, 9:54am 3

cloak_ecto is the library that you’re after.