[GitHub] [incubator-shenyu] dengliming opened a new issue #1888: Optimize the password encryption and password change logic for the admin user

Fri, 06 Aug 2021 01:15:35 -0700 


dengliming opened a new issue #1888:
URL: https://github.com/apache/incubator-shenyu/issues/1888


   ## Task
   
   Currently, We use the AES algorithm to encrypt the password and provide the 
password back to the front end. I think It's not safe. 
   
   
![image](https://user-images.githubusercontent.com/7796156/128477713-2de63807-7a51-4e3f-9b90-e24f6cfc81bc.png)
   
   I suggest the following optimization:
   
   1. The API does not return the password field. See 
`org.apache.shenyu.admin.controller.DashboardUserController#detailDashboardUser`
   2. Consider Using sha512 algorithm to encrypt the password (**Need to 
discuss**)
   
   Please read the [Contribution 
Guideline](https://shenyu.apache.org/community/contributor/) before submitting 
the PR
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to