Re: [xwiki-users] Password Class & passwords for external webservices

Hi, I'd like to allow users to access the a web services from XWiki documents via a plugin. However, the web service requires user-specific passwords. What is the best approach to deal with this? One option is to add "Password Class" fields to the XWikiUsers class, and adapt the user template to allow users to set their password when they edit their page. The field's value is not displayed on the page, but the passwords are stored in the XWiki database in plain text, and the user's page is found if a wide search is ran on a substring of the password. Could also add methods to the plugin that store passwords in the database after encrypting them with some private key; they'd then get decrypted within the plugin code before being sent to the web service. This isn't bad, but maybe you guys have better ideas! :)