在 java 桌面应用程序中安全地存储数据库密码的位置

Question

i was looking over the similarly questions but i didn't find the right answer and i think that there has to be some secure solution.

I have the client- server application. The clients are connecting to the central MySQL database which is on server. My problem is how to secure store database password on client desktop application. For now i am storing it in crypt form in java properties file. But properties files are readable and also after decompiling my application everybody can see which crypt function i use for encoding the password and can easily get the password. So i think that there is no way how to secure store the db password in client application, am I right?

The solution can be that the client application will do some handshake with the server to get the database password, is there any rules or patterns how to do this handshake?

Answer 1

Take a look at OAuth for authorization.