Obscure password

[pbugnion]

When the cursor is not explicitly in the connection string box, the password should be obscured. We could bind to the focus / blur events on the input to mediate this.

[martintoreilly]

The JupyterLab Credential Store might also be worth considering if it's easy to connect to JupyterLab SQL.

[pbugnion]

Ah nice! That looks like a way to protect credentials loaded in notebooks, which is really useful, but a bit different to our use case: the database password is only present in the browser client, so it never leaves the user's computer. It's never stored on the server.

The only concern this should address is people looking at the user's screen and copying the password.

[martintoreilly]

Ah, sorry. I hadn't realised that the connection credentials weren't stored with the notebook.

[pbugnion]

Addressed by PR #45 , released in version 0.1.4.