I will need to store some sensitive data (API keys, Client Secrets) of my customers in my DB. I was wondering if anyone could help me with these questions.
1. What are the best practices for storing client secrets and API keys in a DB?
2. Should the encryption be handled in the application level (using a library built on top of Node Crypto) or the database level (with pgcrypto)? What are the pros/cons of each option?
3. What are some good encryption libraries in Node.js (I want to avoid rolling my own crypto)?
4. At what frequency should I rotate keys? What are some methods to handle key rotation?
I will need to store some sensitive data (API keys, Client Secrets) of my customers in my DB. I was wondering if anyone could help me with these questions.
1. What are the best practices for storing client secrets and API keys in a DB?
2. Should the encryption be handled in the application level (using a library built on top of Node Crypto) or the database level (with pgcrypto)? What are the pros/cons of each option?
3. What are some good encryption libraries in Node.js (I want to avoid rolling my own crypto)?
4. At what frequency should I rotate keys? What are some methods to handle key rotation?
Thanks a lot!