Sensitive data is visible in the request and response

[shchienko (Nikita Schienko)]

Hello @krushna.machhi,

Look at the next topic:

Hiding Password of the user

Hi, just to clarify: in any login flow — whether it’s a traditional form-based login (e.g., HTML + Spring Security), a React frontend calling a REST or OAuth endpoint, or a Vaadin-based UI — the password needs to be transmitted to a server at some point, typically when the user clicks the “Login” button. In Vaadin, depending on how components are configured, the client might send additional input events (like pressing Backspace) to the server, but that’s unrelated to the actual login process. …

Regards,
Nikita