[magnolia-dev] [JIRA] (MGNLUI-4182) Password field stores password in plain text

[JIRA (on behalf of Antti Hietala)]

Title: Message Title

Antti Hietala created an issue   Magnolia UI / MGNLUI-4182 Password field stores password in plain text Issue Type: Bug Assignee: Unassigned Components: forms Created: 31/Mar/17 4:36 PM Priority: Major Reporter: Antti Hietala In Password field documentation we say: The field saves a cryptographic Bcrypt hash of the password rather than the password itself. This statement is not correct, at least not by default. The password field stores the password in the repository in plain text (unencrypted) by default. To reproduce, configure the field in any form and examine the result. It's not clear what the user must do to enable the encryption. An encode property is listed in documentation but it doesn't seem to do anything. PasswordFieldDefinition has no such property. Fix the default behavior or document how to enable encryption. Add Comment   This message was sent by Atlassian JIRA (v7.2.6#72008-sha1:26175bf) ---------------------------------------------------------------- For list details, see: http://www.magnolia-cms.com/community/mailing-lists.html Alternatively, use our forums: http://forum.magnolia-cms.com/ To unsubscribe, E-mail to: <dev-list-unsubscr...@magnolia-cms.com> ----------------------------------------------------------------