Best Practice for Passwords used in Integrations
Summary:
Hello
Does anyone have best practice for the following use case.
We need to build an integration to send financial files via REST API.
The API security requires us to perform a handshake to obtain a CSRF token and JSESSIONID, but then also requires us to send the username and password in the Authentication request body.
What is the best way to store the user/password credentials. Ideally we don't want to store the password in an OIC lookup or parameter value.
Is it possible to utilise OCI vault - to store there, and then retrieve at run time?
Tagged:
1