Skip to content

Sheetal - Create 100% secure method of hiding social media passwords#2065

Open
sheetalmangate wants to merge 17 commits intodevelopmentfrom
sheetal-hiding-social-media-passowrds-backend
Open

Sheetal - Create 100% secure method of hiding social media passwords#2065
sheetalmangate wants to merge 17 commits intodevelopmentfrom
sheetal-hiding-social-media-passowrds-backend

Conversation

@sheetalmangate
Copy link

Description

Create 100% secure method of hiding social media passwords.
Related to the request above, we must hide/secure our social media passwords somehow. I’d like multiple layers of security, if possible. Perhaps a layer that requires a special password
Newell: Suggests setting up a password manager service (e.g. 1Password, Dashlane, Bitwarden, etc.). Notice that it is better to put this behind authentication (like a VPN or OAuth, or combined).
So two naive steps:

  1. OAuth for team members to access the password manager services (i.e. Okta, Permify, etc.) : This functionality is not implemented in this PR
    Set up an actual password manager (e.g. Bitwarden)

Related PRS (if any):

This backend PR is not related to any front end PR.

Main changes explained:

  • Create account on https://bitwarden.com/
  • Create demo secrets into Bitwarden Secret Manager
  • Create demo username/password into Bitwarden Password Manager
  • Add env variables for Bitwarder BWS_ACCESS_TOKEN, BITWARDEN_ORGANIZATION_ID, BW_CLIENTID,BW_CLIENTSECRET
  • You will get BW_CLIENTID and BW_CLIENTSECRET from Settings -> Security -> Keys -> API key
  • You will get BWS_ACCESS_TOKEN from Machine Accounts -> Access Token

How to test:

  1. check into current branch
  2. do npm install and ... to run this PR locally
  3. Clear site data/cache
  4. Use below endpoints in Psotman
    Fetch all secrets from Bitwarden : http://localhost:4500/api/bitwarden/auth
    Fetch all stored username/password from Bitwarden using: http://localhost:4500/api/bitwarden/password/vault/retrieve

Screenshots or videos of changes:

Note:

Include the information the reviewers need to know.

branch 'development' of https://github.com/OneCommunityGlobal/HGNRest into development
Merge branch 'development' of https://github.com/OneCommunityGlobal/HGNRest into development
i especially if it merges an updated upstream into a topic branch.
…GNRest into sheetal-development

merging development branch on local
…GNRest into sheetal-development

taking update from remote branch
@one-community one-community added Do Not Review Do not review or look at code without full context Needs New Developer This is a PR that is partially developed but needs someone new to take it over and finish it. labels Mar 2, 2026
@one-community one-community changed the title Create 100% secure method of hiding social media passwords Sheetal - Create 100% secure method of hiding social media passwords Mar 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Do Not Review Do not review or look at code without full context Needs New Developer This is a PR that is partially developed but needs someone new to take it over and finish it.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants