Question
NAB
AU
Last activity: 23 May 2023 12:03 EDT
Decrypting Client Secret from Authentication Profile
Is there any Pega OOTB function to decrypt the Client Secret. pega stores it as {in}fhskfjshkdfjdshkfdshfsdk.
We have tried with DecryptPW and DecryptPropertyValue but it did not give the correct results.
Thanks,
Nabendu
Pegasystems Inc.
IN
@NabenduP0375 Use @Decode and pass the property to decode the password.
(or)
Use Java step and use below code
pwd = tools.getPRCrypto().decrypt(myStepPage.getProperty("pyPassword").getStringValue());
myStepPage is of authprofile class instance which you want to decrypt.
John Deere
IN
@SriTirupathiRaju This doesnt works. I tried below in Java step. It returns me the same value. Please assist.
String text =tools.getPRCrypto().decrypt(myStepPage.getProperty("pySecretAccessKey").getStringValue());
Contractor
US
@PareshN5090 Pega uses this java function to encrypt - pega.encryptInternal(clientSecret);
We have have the same issue with some Access and Refresh Tokens and Pega's response was that it can't be decrypted. Because of that we had to take a different approach to an OIDC implementation we were doing, if that data is not accessible then the OIDC Authentication Services is useless.
Charter Communications
US
Hi,
Try below:
1) Use Obj-Open-By-Handle method to open record from DATA-ADMIN-SECURITY-AUTHENTICATIONPROFILE table
2) Password will be stored in pyPassword Property
3) Use Java function and set below value.
Example:
String pwd = tools.getPRCrypto().decrypt("\t"+"{pr}Yg4dznIRtuf+wEG6tqI+WEbyBXjtgvE6NV6WaTJ1c2x1aXinH13GDDnV3xH8/AF6"); tools.getParameterPage().put("test",pwd);
4) Use Property-set to get value:
Param.newpwd = Param.test
5) Check tracer and you will get decrypted password.