Felix Meschberger created FELIX-4299:
----------------------------------------

             Summary: Support hashed password
                 Key: FELIX-4299
                 URL: https://issues.apache.org/jira/browse/FELIX-4299
             Project: Felix
          Issue Type: Bug
          Components: Web Console
    Affects Versions: webconsole-4.2.0
            Reporter: Felix Meschberger
            Assignee: Felix Meschberger
             Fix For: webconsole-4.2.2


While the Web Console supports extension of its access authentication, the 
default authentication is just a simple username/password match where the 
password is part of the configuration and may be flying around in plaintext.

To prevent the password from being stored in plain text in the configuration, 
the Web Console should support simple hashing of the password. A hashed 
password is of the form

  {hashCode}base64-encoded-hashed-password

where hashCode is the hash algorithm used and base64-encoded-hashed-password is 
the hashed password encoded in base64.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to