Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,365,184
Community Members
 
Community Events
168
Community Groups

Masking password in view plan as spec

Hello,

The password I enter in the task is displayed in plain text when I view "Bamboo plan as java spec" or yaml spec.

How do I display ***** in place of password when viewing the spec?

 

Thanks

1 answer

1 accepted

1 vote
Answer accepted

What's the task plugin?

Please contact support if plugin is provided by Atlassian or plugin vendor otherwise.

There's nothing you can do to avoid such situation as a user.

We wrote the plugin. the password field is created as 

 

[@ww.password  labelKey="password" name="xxx" required="true" showPassword="true" /]

When configuring the plan the password is masked and displayed Screen Shot 2021-03-09 at 10.42.31 AM.png

 

 

But when I click view plan spec it is displayed in plain text. How do I display ***** instead of plain text?

 

taskspec.png 

I see.

You need to change plugin code to use com.atlassian.bamboo.crypto.instance.SecretEncryptionService to encrypt user input before keep it to task configuration.

Then you need to use RuntimeTaskDefinition to provide this value to agent when job is sent for execution.

As reference look at code of Bamboo SCP/SSH plugin, see BaseSshTaskConfigurator.java how to keep config at encrypted state and BaseSshTaskRuntimeDataProvider.java to see how to provide RuntimeTaskData

Suggest an answer

Log in or Sign up to answer
TAGS

Atlassian Community Events