Saving password inTranslation Cloud config | Adobe Higher Education
Skip to main content
J
JanHumpal
Level 2
March 17, 2021
Répondu

Saving password inTranslation Cloud config

For the configuration of our translation connector we need to save a password in its Translation Cloud configuration. This used to be ok in AEM 6.5 as the password could be encrypted using the /system/console/crypto. This is no longer possible in cloud based AEM.
Is there a way to programatically invoke the same functionality, when the config form is saved?

Ce sujet a été fermé aux réponses.
Meilleure réponse par JanHumpal

Hello Arun!

 

Thanks for the reference, however I don't see how that answers the question.

Let me try to clarify what the problem is.
Formerly, these used to be the steps the user of our connector would take to set up the configuration:

  1. Create the configuration
  2. Open /system/console/crypto
  3. Encode the password to our service
  4. Fill the encoded password and other details
  5. Save the configuration

Step 2 and 3 are no longer possible in cloud. I was asking if there is a way the code of our connector could invoke the crypto service to encode the password when the configuration is saved, so that it isn't stored in plaintext.

Or is it the case, that we need to instruct our users to extract the key from their cloud AEM, inject it into an SDK and encode the password there?

3 commentaires

arunpatidar
Community Advisor
arunpatidarCommunity Advisor
Community Advisor
March 18, 2021

Please check https://experienceleague.adobe.com/docs/experience-manager-cloud-service/implementing/developing/aem-as-a-cloud-service-sdk.html?lang=en#accessing-the-aem-as-a-cloud-service-sdk

 

 

In case you depend on CryptoSupport (either by configuring the credentials of Cloudservices or the SMTP Mail service in AEM or by using CryptoSupport API in your application), the encrypted properties will be encrypted by a key that is autogenerated on the first start of an AEM environment. While the cloudsetup takes care of automatically reusing the environment-specific CryptoKey, it is necessary to inject the cryptokey into the local development environment.

Arun Patidar
    J
    JanHumpalAuteurRéponse
    Level 2
    March 22, 2021

    Hello Arun!

     

    Thanks for the reference, however I don't see how that answers the question.

    Let me try to clarify what the problem is.
    Formerly, these used to be the steps the user of our connector would take to set up the configuration:

    1. Create the configuration
    2. Open /system/console/crypto
    3. Encode the password to our service
    4. Fill the encoded password and other details
    5. Save the configuration

    Step 2 and 3 are no longer possible in cloud. I was asking if there is a way the code of our connector could invoke the crypto service to encode the password when the configuration is saved, so that it isn't stored in plaintext.

    Or is it the case, that we need to instruct our users to extract the key from their cloud AEM, inject it into an SDK and encode the password there?

      arunpatidar
      Community Advisor
      arunpatidarCommunity Advisor
      Community Advisor
      March 22, 2021
      Hi, you can use APIs as well to encrypt https://helpx.adobe.com/experience-manager/6-5/sites/developing/using/reference-materials/javadoc/com/adobe/granite/crypto/CryptoSupport.html
      Arun Patidar
      J
      JanHumpalAuteur
      Level 2
      April 20, 2021

      Hello @arunpatidar ,

       

      Thanks for the tip, the event route turned out to yeild a working implementation.

      I still have one concern though.

      The event that is published when the configuration is saved has the broad topic of `com/day/cq/wcm/core/page`, so filtering on level of code seems like a potential performace issue.

      But I'm unable to filter events using the `EventConstants.EVENT_FILTER`.

      I tried to specify 

      EventConstants.EVENT_FILTER + "(path=/conf*)"

      or

      EventConstants.EVENT_FILTER + "(modifications.path=/conf*)"

       but neither filters out a regular page edit. I suspect this is caused by the event having the modifications as an object (see attached screenshot from the event console). 

       

      Do you know if there is a way around that, or if filtereing in the event handler itself is actually the correct solution?

        arunpatidar
        Community Advisor
        arunpatidarCommunity Advisor
        Community Advisor
        April 21, 2021

        Hi, can you check below example that works for me for sling events

        https://github.com/arunpatidar02/aem63app-repo/blob/master/java/ReplicationEvent2.java

        Arun Patidar
        Conditions d'utilisationAccessibility statement

        Loading footer...