I'm writing a slack bot that interfaces end users with an API. That API only method of identification is the raw "login:password" encoded to base64 (it doesn't answer back a token) ...
Currently in test mode, I'm just asking users to send their credentials to the bot and then the server can make requests to the API with their credentials.
I can't change the http request to the API, but what can I do on my side to store the credentials so the user doesn't have to re-enter their password for every request ?
Is a reversible encryption any good ?
update: my last idea is to store the password for only a short period of time