-
Notifications
You must be signed in to change notification settings - Fork 299
Description
Is your feature request related to a problem?
We would appreciate an option to not store authentication credentials in plain text in browser storage, as this may pose a security risk.
Additionally, in #1238, we discovered a bug (or unintended side effects?) which means endpoint urls can become corrupted when viewing different schemas with the same base url. Disabling persistent storage would also be a workaround for this issue.
Describe the solution you'd like
A configuration option to disable sessionStorage persistence for auth credentials. An authPersistence configuration option is mentioned in the v0.2.1 (Dec 5, 2021) changelog (https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/blob/main/CHANGELOG.md#021-dec-5-2021), but this does not seem to be implemented in the latest version.
Describe alternatives you've considered
Additional context
This is demonstrated in the demo site: https://docusaurus-openapi.tryingpan.dev/petstore/add-pet
These plain text variables are persisted for as long as the browser tab is open.