Masking password in view plan as spec

[Meena Chauhan]

Hello,

The password I enter in the task is displayed in plain text when I view "Bamboo plan as java spec" or yaml spec.

How do I display ***** in place of password when viewing the spec?

Thanks

[Alexey Chystoprudov · Accepted solution]

What's the task plugin?

Please contact support if plugin is provided by Atlassian or plugin vendor otherwise.

There's nothing you can do to avoid such situation as a user.

[Meena Chauhan]

We wrote the plugin. the password field is created as 

[@ww.password  labelKey="password" name="xxx" required="true" showPassword="true" /]

When configuring the plan the password is masked and displayed 

But when I click view plan spec it is displayed in plain text. How do I display ***** instead of plain text?

 

[Alexey Chystoprudov]

I see.

You need to change plugin code to use com.atlassian.bamboo.crypto.instance.SecretEncryptionService to encrypt user input before keep it to task configuration.

Then you need to use RuntimeTaskDefinition to provide this value to agent when job is sent for execution.

As reference look at code of Bamboo SCP/SSH plugin, see BaseSshTaskConfigurator.java how to keep config at encrypted state and BaseSshTaskRuntimeDataProvider.java to see how to provide RuntimeTaskData

[Meena Chauhan]

Thank you!