问题
I have an OSX program written with BASH scripts. I want to enable anyone who has this program downloaded to be able to FTP files to my server (and associate it with their account for them to access the stuff, of course) WITHOUT allowing the user access to the FTP login/access credentials. How do I do this?
I already have experience with BASH/Shell, Java, and Procedural C++, so if it can be done with one of these programming languages, that would be preferable. However, Any suitable answer will suffice.
if it is possible to provide an enterprise- or professional-level of security for the FTP login credentials, that would be most helpful.
I don't need advice on managing user accounts or managing their access to exclusively their information. I only mentioned that to illustrate the context in which it will operate. An indefinite number of users need to be able to access and store their things on the same server.
This functionality doesn't REQUIRE an FTP-based solution. Any suitable solution will suffice.
回答1:
If an application needs an access to a remote system that requires credentials, the credentials have to be stored somewhere in the application.
All you can do is to make the credentials hard to find in the application (obfuscate them).
What is particularly difficult, if the application is scripted, as is your case.
See Obfuscating stored passwords in bash.
来源:https://stackoverflow.com/questions/28864791/bash-allow-users-to-ftp-files-to-my-server-without-revealing-ftp-login-credenti