What would be the correct way to store a token for 3rd party API access in Ignition? I’m writing functions to handle smart thermostat APIs, and currently the token is held in a tag in plain text.

Not sure how I didn’t find that other thread. @paul-griffith You can delete this thread since it is redundant, apologies.

Inductive Automation Forum

Storing Tokens Securely

Ignition

bkarabinchak.psi June 18, 2021, 2:17pm 2

Best practice for an API key Maker

Some previous discussion around this in this thread: In general, the most important thing is to limit the scope of where you secret can possibly be read from. There’s some filesystem based suggestions in that thread that are good practice. Environment variables can work, but aren’t guaranteed to be as isolated as you might like them to be, as @pturmel points out in that thread. Ideally, anything interacting with an API would eventually become an Ignition module - in that case, you can stor…

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled