Caution advised storing passwords & tokens in ICN plugin configuration
For those creating IBM Content Navigator plugins, please be advised not to store any tokens, passwords or API keys in the plugin configuration, as it will be accessible to all authenticated users. Although you would expect the ICN admin-api to be limited to admin-users, the following snippet works for everyone 🙂 […]