R18 – Credentials are in plain text (WMB)

Credentials are in plain text (WMB)

This indicates that credentials for authorisation/authentication have been setup in the code in plain text.

For example SET OutputRoot.Properties.IdentityMappedType = ‘usernameAndPassword’;
SET OutputRoot.Properties.IdentityMappedToken = ‘xxx’;
SET OutputRoot.Properties.IdentityMappedPassword = ‘plaintextpassword’;
SET OutputRoot.Properties.IdentityMappedIssuedBy = ‘zz’;

They ideally should be replaced by a constant defined as an ‘EXTERNAL’ so that they can be replaced at deployment time using a broker override.