Improve authentication handling in a way that the username and password isn't exposed within the configuration (config.json) file.
Proposal:
- Remove username and password json settings from config.json.
- Prompt username and password when app starts for the first connection json details from config.json.
- Each "change" connection command prompt for username and password.
Things to consider:
- Save password as encrypted internal data.
- Perform a simple Rest API like z/OSMF system check to validate given username and password and provide return status message.
- We may need to reenter username and password for the current connection detail. Maybe use linux way like: usermod -l new_username old_username and -p for password
- Disable special key combination features while in username/password prompt like mkdir command.
Improve authentication handling in a way that the username and password isn't exposed within the configuration (config.json) file.
Proposal:
Things to consider: