What are you using to send REST calls?

https://www.middlewareinventory.com/blog/how-to-avoid-or-hide-clear-text-username-and-password-in-curl/

I use postman and it does not type passwords in clear text.

It's a Python script and it's not interactive.  It's scheduled to kick off once a day.  I'd just prefer not to have the password sitting in plain text on the server.

What do you think about having a file with the credentials that only your user has access to?

config.py

username = "xy"
password = "abcd"

main.py

import config
login(config.username, config.password)

Since this is more of a API "flaw" and not VPLEX specific Im not sure what VPLEX could add on its roadmap. This is no different than if you tried to do API calls to your array under VPLEX.

Hi Ankur,

  That's not a bad idea.  I'll work on that for now.  Can you tell me if there are any plans on the road-map to add this feature?

I wouldn't call it a flaw so much in that over the wire communications are secured through HTTPS.  I guess I thought maybe something like an API key or somehow have the system accept a hash instead of a clear text password.  Thanks for replying.

This is perfect!  Tell your developer I said thanks.