Security issue: the API keys are stored in the database as a plain text and are used without a salt

[dmitrii_fediuk]

• Where are the API keys stored?
• How is oro:wsse:generate-header implemented?

How is storing an API secret key in plaintext (in a database) secure?

[dmitrii_fediuk]

Security issue: the API keys are stored in the database as a plain text and are used without a salt