Skip to content

Commit b28885f

Browse files
chore(docs): add warning for encoded credential
1 parent 5f48191 commit b28885f

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

google-cloud-spanner/src/main/java/com/google/cloud/spanner/connection/ConnectionOptions.java

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -229,6 +229,14 @@ public class ConnectionOptions {
229229
/** Name of the 'encodedCredentials' connection property. */
230230
public static final String ENCODED_CREDENTIALS_PROPERTY_NAME = "encodedCredentials";
231231

232+
/** System property used to enable encoded credentials.
233+
* WARNING: Enabling this property without proper validation can
234+
* expose the application to security risks.
235+
* It is intended for use with credentials from a trusted source only,
236+
* as it could otherwise allow end-users to supply arbitrary credentials.
237+
* For more information, see
238+
* https://cloud.google.com/docs/authentication/client-libraries#external-credentials
239+
*/
232240
public static final String ENABLE_ENCODED_CREDENTIALS_SYSTEM_PROPERTY =
233241
"ENABLE_ENCODED_CREDENTIALS";
234242

0 commit comments

Comments
 (0)