As a jabref user
I want to store my shared database password in-memory only
So that my password isn't insecurely stored on the file system
Users must have an option in the preferences window to store the shared database password in memory. The password is then kept only for the duration of the current session.
This is a better option than the current approach which insecurely stores the password to the system - the password is "encrypted" using the DB username as the encryption key, meaning anyone who know the DB username (which is freely available in plaintext) can decrypt the password.
When paired with a credential manager solution this will work as a good fallback. This is the optimal feature combination.
As a jabref user
I want to store my shared database password in-memory only
So that my password isn't insecurely stored on the file system
Users must have an option in the preferences window to store the shared database password in memory. The password is then kept only for the duration of the current session.
This is a better option than the current approach which insecurely stores the password to the system - the password is "encrypted" using the DB username as the encryption key, meaning anyone who know the DB username (which is freely available in plaintext) can decrypt the password.
When paired with a credential manager solution this will work as a good fallback. This is the optimal feature combination.