How to store credentials in an Outlook add-in

I'm looking for the right, secure way to store credentials for a third-party API in an Outlook add-in. This overview of the various storage options does not indicate to store the credentials in the settings, but not where they can be placed, so I assumed RoamingSettings would be ok. Then I came across this page with information about RoamingSettings, which says that this is also the wrong place.

Then the question arises: what in the right place? Should I create my own storage solution and store / encrypt credentials in a file or cookie? This is also not very safe, since we are talking about what is basically a web application running in iframe.

+4
source share
2 answers

I assume that you cannot implement another authorization scheme (based on tokens, cookies, etc.) for your API, and you are stuck with basic authentication and its problems . If you use ASP.NET with all the samples available, it can be very easy to add another authentication scheme that is more tailored to web clients (like Office web add-ins).

Having said that, it’s best for me to use HTML5 storage or cookie storage (if not implemented by the browser) to store your credentials.

, iFramed . (HTML5: sessionStorage/localStorage) , , , , , , iFrame.

, - apis . -!

+2

, Outlook POP3/SMTP/IMAP4 - CredRead/CredWrite API Windows. Windows, , .

, JavaScript. OWA, Outlook, ?

0

Source: https://habr.com/ru/post/1626502/


All Articles