Fetching sensitive data from application.conf

user_1818286 0
Viewed 102

I am trying to understand someone else´s Gradle project and need some help in understanding the syntax. In resources->application.conf there is configuration for username and password written this way:

login{
    username = ${?USERNAME}
    password = ${?PASSWORD}
}

Where does that syntax mean and where do I get the values of username and password? I am currently using intelliJ IDEA. If I know the values of sensitive data, is there anyway I can save these values without exposing them in the code?

Thanks.

application.conf gradle java
2 Answers

That's a system property, so the actual value would be determined at runtime from a property (e.g. passing -DUSERNAME=zimmer in a run script).

The way you could save them would be to have your run script pass the property, if you don't want to specify it manually every time.

Environment variables would be accessed with $System.env.USERNAME style, so my earlier answer assumed that it would search both system properties and env variables.

user_25415600

Those are just placeholders which are being substituted when devops deploy the application. Usually used to hide sensitive information like username, password or secret keys. Also used to rotate sensitive information at a specific period of time.

user_82974270
Related