CODEWITHSUNDEEP
phpsecuritypassword-protectionpassword-encryptionpassword-hash
Steve Kim
Steve Kim

Reputation: 5591

Password saving for API usage (php and mysql)

I am using Instagram API by mgp25.

Here, you can gain access to the IG api via "logging in": the API (in php) requires a password and account id to be in plain text format when gaining the access.

Here is the setup that I have:

I have a site where there are users and the site has IG API integration. These users can input their Instagram User/Password (not the user info to log into the site) to gain access to the API.

However, these API only accepts plain text for password (since the password will then be verified within the IG server).

Problem:

The problem that I am having is the password security. Obviously I can't store the IG password as plain text, but if I hash them, it can't be used to login to the API either (as it is one-way only).

Methods: I can only think of encrypting the password (not hashed) and decrypt them when needed. However, I can see a few issues with that approach as well.

I wanted to ask you guys what you guys think of the best way to address this issue.

(note. The official IG API has some limitation and are only allowing official business partners to have more functions which I need them. So the API by mgp25 is the only viable option at the moment).

Upvotes: 1

Views: 303

Answers (1)

flyjoe12
flyjoe12

Reputation: 94

You could require the password only once. The private API will save the cookies / session forever and you do not need to do a login again.

So this way you don't have to store passwords and, if for some reason the user is logged out, then you ask for password again. Does it make sense?

Upvotes: 3

Related Questions