Hi Imesh,

On Wed, Mar 15, 2017 at 10:19 AM, Imesh Gunaratne <[email protected]> wrote:

> On Sun, Mar 12, 2017 at 7:44 AM, Gayan Gunawardana <[email protected]> wrote:
>
>>
>> CREATE TABLE IF NOT EXISTS IDN_PASSWORD_HISTORY_DATA (
>>   ID INTEGER NOT NULL AUTO_INCREMENT,
>>   USER_UNIQUE_ID   VARCHAR(255) NOT NULL,
>>   SALT_VALUE  VARCHAR(255),
>>   HASH        VARCHAR(255) NOT NULL,
>>   TIME_CREATED TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
>>   PRIMARY KEY(ID),
>>   UNIQUE (USER_NAME,USER_DOMAIN,TENANT_ID,SALT_VALUE,HASH)
>> )ENGINE INNODB;
>>
>
> ​Would you mind explaining the purpose of the field SALT_VALUE?
>
In order to compare user given password with stored password salt value is
required.

>
> Thanks
> Imesh
> ​
>
>>
>> Password Hashing algorithm will be a configurable property.
>>
>> [1] [Architecture] Force Password Reset and Password History validation
>>
>> Thanks,
>> Gayan
>>
>> --
>> Gayan Gunawardana
>> Software Engineer; WSO2 Inc.; http://wso2.com/
>> Email: [email protected]
>> Mobile: +94 (71) 8020933
>>
>> _______________________________________________
>> Architecture mailing list
>> [email protected]
>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>>
>>
>
>
> --
> *Imesh Gunaratne*
> Software Architect
> WSO2 Inc: http://wso2.com
> T: +94 11 214 5345 M: +94 77 374 2057 <+94%2077%20374%202057>
> W: https://medium.com/@imesh TW: @imesh
> lean. enterprise. middleware
>
>
> _______________________________________________
> Architecture mailing list
> [email protected]
> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>
>


-- 
Gayan Gunawardana
Software Engineer; WSO2 Inc.; http://wso2.com/
Email: [email protected]
Mobile: +94 (71) 8020933
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to