Is secure to save data in workflow / users variabl...
# 🤝help
a
Hello In the documentation says that is not secure to save information like connection tokens into the "bot" variables but is secure to use "workflow" and "user" variables to save private data such api credentials when is not possible to do it in global vars? Thank you
f
Hey there, I would recommend you to use the configuration variables (env variables) https://botpress.com/docs/cloud/studio/variables/#configuration-variables
a
Thank you Decay This is not possible for my use case because each user get some access tokens dynamically and i have to save this information somewhere. env variables are global In the documentation says: "Bot variables are not encrypted or stored securely. Do not save secrets like API keys or passwords in bot variables - use configuration variables instead!"ç But what happens with user variables?
f
Are okay. Then I would recommend you to store them with the user scope. Bot scope carries over between conversations which means that other users will have access to other users tokens.
a
Great, thank you
2 Views