How to get password from external account in workflow JS code?

[#1]

Hi,

I am trying to connect to a third party service and download files as part of a technical workflow. However, when I tried to use the password from external account, I ended up learning that decryptPassword() can only be used in JSSP and SOAP calls.

How can I avoid hardcoding passwords in the workflow? And at the same time I dont want to configure a plain text password any where in the system?

Regards,

Kiran

[kkedem · Accepted solution]

Hi,

The function works fine from JSSP, i.e. <%= decryptPassword(request.getParameter('s')) %>.

From there it's an HTTPClientRequest() call to localhost to pick it up.

Thanks,

-Jon

[kkedem · Accepted solution]

Thank you wodnicki. But these JSSPs are not bound by any authentication right? Is not that a security concern?

[Sukrity_Wadhwa · Accepted solution]

@ wodnicki Can you please clarify @kkedem 's concern? Thanks!

[MarcelSzimonisz · Accepted solution]

i can answer.. you can make them and you can make them not be bound by authentication. If you generate any code from web app you will see this line is handling authentication if( !jsspContext.checkAuthentication(response) ) return

[kkedem · Accepted solution]

Actually i like this idea and tried to implement it. However, when tried to execute a localhost call, ACC complained about localhost not present in allowed list of URLs. I tried to add localhost through the control panel but the regex prevented me. I tried to whitelist the server name ending with .adobe.com but the control center prevented me saying in order to avoid loops whitelisting own server url url is restricted. any ideas on how to trigger the localhost call then?

@wodnicki - any ideas on this? Is there a special way to get around this URL permissions thing and execute a localhost call?

@Amit_Kumar  - hey, can you help on this one? i am unable to get the localhost call to work from JS. Are there ways to workaround it?

[wodnicki · Accepted solution]

I responded in the other thread: https://experienceleaguecommunities.adobe.com/t5/adobe-campaign-classic-questions/how-to-make-a-loca...

[MarcelSzimonisz]

Hi,

I tried and it worked well in a JS activity (in a workflow) with decryptPassword on build 9032:

var account = NLWS.nmsExtAccount.load(999999);
var cryptedPassword = account.password;
logInfo('cryptedPassword:', cryptedPassword); // "@Ohdznkl1fre1fs6e4rg68rezbk1=="
//var password = decryptString(cryptedPassword); // use before build 8947
var password = decryptPassword(cryptedPassword); // use starting from build 8947
logInfo('password:', password); // "my_P@ssw0rd"

disclaimer: the decryptString function is deprecated since build 8947 (25 June 2018)

[MarcelSzimonisz]

It could be mistake as there is no replacement listed.. i had a good laugh on it the other day

[kkedem]

I tried this but unfortunately the decryptString return empty string. And I think I am in the same build as you 9032@3a9dc9c

[Sukrity_Wadhwa]

Hey @Florian_Courgey, Can you direct me to that doc? I would be happy to get that rectified. Thanks!

[florianc4919953]

Hi Sukrity, sure, it's here https://docs.adobe.com/content/help/en/campaign-classic/technicalresources/api/f-decryptString.html

[Sukrity_Wadhwa]

Thanks Florian! I have escalated this to the Product Documentation team..

[Sukrity_Wadhwa]

Hi,

This function has been deprecated in 2018. 

Refer to the release notes of release 18.6 here: https://docs.adobe.com/content/help/en/campaign-classic/using/release-notes/previous-releases/releas...

And, the Deprecated and removed features section here: https://docs.adobe.com/content/help/en/campaign-classic/using/release-notes/deprecated-compatibility...

It should no longer be available in the product.

Thanks!

[Florian_Courgey]

Thanks Sukrity, I've updated the answer