Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
The ProcessContext interface includes methods for encrypting and decrypting strings using the Sensitive Properties Key and Sensitive Properties Algorithm configured in nifi.properties. The deprecated GetJMSTopic Processor is the only component that uses these methods.
Although these methods provide some potential conveniences, they introduce tight coupling between framework configuration settings and Processor implementation. Changing either the Sensitive Properties Key or Sensitive Properties Algorithm would break reading values encrypted using previous settings, with no programmatic way to recover the information. Requiring strings as input also necessitates using some prior encoding strategy to handle binary information.
In light of the minimal usage of these methods and the potential implementation concerns, the encrypt and decrypt methods should be deprecated for removal in subsequent major versions.
Attachments
Issue Links
- links to
