Hello everybody,

you should not store user's pwd on local machine. I understand that you can encrypt it and save to local INI, but it is still a security violation.

Traditionally the remember-me works using a cookie associated to the user in the DB. When the user goes back to the webapp, the browser sends the cookie and the server finds which user has it in the DB. But there is not direct API for handling cookies in PB/PS.

Luckily, we can use the more modern approach based on JWT. From SnapDevelop write a C# Web API that generates a JWT based on valid usr/pwd. The JWT can be stored locally and passed back and forth using RESTclient and HTTPclient objects. Here the how-to:

https://docs.appeon.com/snapdevelop2019/Secure_a_Web_API_with_JWT_Token/index.html

Best,

.m

Thanks all for replying. I will check the suggested solutions and let you know about results.

Hi Miguel;

   I do this in my STD framework. It uses a built in one-way (mandatory for secure passwords) encryption mechanism written in pure PowerScript to save the user's credentials in an INI file. I have used this approach for almost 2 decades and it works in Native PB and PS IWA, Web & Mobile. You can see this feature in action in the OrderEntry "demo" App, as follows:

https://sourceforge.net/projects/stdfndclass/files/Applications/PowerBuilder/OrderEntry

  Note that the framework's encryption feature is a global function. So feel free to grab it for your own App's use. However the technique is generic, so you could replace the GF with the newer PB's built-in encryption object class method(s) if you like.

HTH

Regards ... Chris

I don’t think it is secure to save the password to the machine.  But if you are not concerned, one option is to write to an INI file.