Credentials Exposure in /backend_connection_configuration

[kagesenshi]

I found out that if setting NEO4J_URI, NEO4J_USERNAME, NEO4J_PASSWORD, NEO4J_DATABASE in the backend carries a security risk as POST operation to /backend_connection_configuration would return the database login details to anyone who can access the endpoint.

While not an issue in private deployment, it would be good if this is alerted in the documentation so that users does not unnecessarily open themselves up to security breach when deploying to cloud or even internal network of large organization.

[jexp]

Thanks a lot, yes you're right. We'll fix it, so that the backend can fill in that information itself in API calls when it's configured and only informs the front-end that the configuration is there and about the DB URI.