One way this is often done is to have this information in a file that only the owner can read. For example, mysql uses a file .my.cnf (in Windows it may have a different name). The code then just reads the information from the file. To guard against user carelessness, I think mysql will not use it if anyone other than the user has read permission on the file. Of the various options for passing user/password information, I think this is general considered one of the better ways.

Paul

On 11-12-14 04:54 PM, Ni Wang wrote:
hi, r developers, I am now working on a R function/package to handling
online request with username and token/password.

For security reasons, it's not so safe to store the username&  token in
persistent variables, since they'll be saved to disk when
users save their workspace. Is there a secure way in R to handle the online
password management? I have searched it online
but didn't find any good suggestions. So I am trying my luck on this mail
list.

Regards

Ni

        [[alternative HTML version deleted]]

______________________________________________
R-devel@r-project.org mailing list
https://stat.ethz.ch/mailman/listinfo/r-devel

______________________________________________
R-devel@r-project.org mailing list
https://stat.ethz.ch/mailman/listinfo/r-devel

Reply via email to