Francesco Chicchiriccò created SYNCOPE-946:

             Summary: Encrypted attribute values not managed as password values
                 Key: SYNCOPE-946
             Project: Syncope
          Issue Type: Bug
          Components: console
    Affects Versions: 2.0.0
            Reporter: Francesco Chicchiriccò
             Fix For: 2.0.1

When editing an user / group / any object with an encrypted attribute, the 
value is treated as plain text.

How to reproduce:
 # create an Encrypted schema {{sharedPassword}}
 # create an user, and set the {{secret}} value for {{sharedPassword}}
 # edit such user from the admin console: the value for {{sharedPassword}} will 
be the encrypted string

As a result, when clicking on Finish, the encrypted value will be sent again to 
the core, which will then encrypt it again.

This message was sent by Atlassian JIRA

Reply via email to