Comments (3)
Even plugins that aren't local would still be writing a secret to an unencrypted file. I think we can revisit this when Roblox releases Secrets.
from rojo.
bonus points if it saves the secret key, just like how it currently saves the endpoint for quicker initialization
I'm not sure I'm willing to commit to this because local plugins (those not downloaded from the website) all share the same settings file so it would inviting people to store authentication keys in plaintext in a place other plugins can conceivably read from.
Otherwise, this seems reasonable and I'd like to support it.
from rojo.
Even plugins that aren't local would still be writing a secret to an unencrypted file. I think we can revisit this when Roblox releases Secrets.
Does anyone have any more information about these? I recall secure secret storage being announced at RDC 2023, and there's a mention of a Secret
data type in the Roblox 599 release notes, but it's unclear if they'll be practical for use by plugins.
from rojo.
Related Issues (20)
- Packages built with Rojo have script differences even if they are identical HOT 3
- Rojo doesn't apply font type from .rbmx files HOT 11
- warning "value cannot be converted to a number" on Billboard Gui's "MaxDistance" property HOT 1
- `rojo sourcemap` occasionally outputs invalid JSON HOT 2
- Rojo plugin should have a "Never" option for the confirmation behavior setting
- Rojo breaks outbound studio Roblox API requests HOT 3
- Omit `.project.json` when searching for a project file HOT 3
- High CPU usage and file not syncing when drafts mode is enabled HOT 6
- always crashing on start and during sync HOT 1
- Rojo unexpectedly trims trailing newline characters when syncing to Studio. HOT 7
- Naming a luau file "Init" instead of "init" causes the special case to duplicate scripts HOT 1
- Glob ignore paths doesn't work for projects that define content above their relative path
- Multiple instances being created for a single folder HOT 1
- Plugin cannot undo rbxm sync if the root instance has changed type HOT 2
- A `default.project.json` with an omitted `name` field sets the name of its top-level instance to `default` after subsequent changes
- Error with cargo install on windows machine HOT 2
- Option for $ignoreUnknownDescendants
- Conflict Detection seems unreliable [Edit: nevermind, maybe a doc improvement?] HOT 3
- Use of the name property of .rbxmx or .rbxm files instead of file names HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rojo.