seata-server 需要配置加密

[qiangqiangji]

应安全要求，seata server 的配置文件中不能出现明文密码，application.prpperties中console，nacos注册中心和nacos配置中心的连接信息等需要加密

[funky-eyes]

Are you referring to the username and password required for registration and configuration center, or the username and password related to the database? Or does the entire configuration need to be encrypted?

[qiangqiangji]

Are you referring to the username and password required for registration and configuration center, or the username and password related to the database? Or does the entire configuration need to be encrypted?

数据库的密码加密已经被druid实现了，满足安全要求；其余还需要加密（配置文件中不允许出现明文密码），包含注册和配置中心所需的密码，控制台的密码等

[YongGoose]

For the console password, the below PR implements it so that the username and password are entered by the user instead of being stored in the configuration file.

• feature: enforce account initialization and disable default credentials #7261

It might be a good idea to also add encryption functionality here.
We could consider whether to include it in this PR or handle it in a separate one—might be worth discussing.

@qiangqiangji Would it be okay to ask if this PR addresses what you're referring to?

[qiangqiangji]

For the console password, the below PR implements it so that the username and password are entered by the user instead of being stored in the configuration file.

• Feature: enforce account initialization and disable default credentials #7261

It might be a good idea to also add encryption functionality here. We could consider whether to include it in this PR or handle it in a separate one—might be worth discussing.

@qiangqiangji Would it be okay to ask if this PR addresses what you're referring to?

注册和配置中心连接所需的密码加密有计划吗

[YongGoose]

For the console password, the below PR implements it so that the username and password are entered by the user instead of being stored in the configuration file.

• Feature: enforce account initialization and disable default credentials #7261

It might be a good idea to also add encryption functionality here. We could consider whether to include it in this PR or handle it in a separate one—might be worth discussing.
@qiangqiangji Would it be okay to ask if this PR addresses what you're referring to?

注册和配置中心连接所需的密码加密有计划吗

There isn't a detailed plan yet, but I also recognize the need for this feature.
If you feel the same way, I'm open to discussing it with the Seata team and with you. 🙂

[YongGoose]

@qiangqiangji

See #7261