[BEAM-6292] PasswordDecrypter: Delay decryption / Avoid serialization

• Type: Improvement
• Status: Resolved
• Priority: P3
• Resolution: Workaround
• Fix Version/s: Not applicable
• Component/s: io-java-cassandra
• Assignee: Mathieu Blanchard
• Reporter: Mathieu Blanchard
• Created: 21/Dec/18 10:51
• Updated: 16/May/20 13:16
• Resolved: 21/Mar/19 16:14

Description

Currently, the password is decrypted before the serialization of the pipeline and this causes the raw version to be visible to everyone on the staging location.

To avoid this, we delayed the decryption of the password when connecting to the cluster, which ensures that the raw password is never serialized in the pipeline.

Issue Links

• links to: GitHub Pull Request #7348
• links to: GitHub Pull Request #8099