appserver
appserver copied to clipboard
Added support for salting
I've added support for hash salting and support for more hashing algorithms.
There's a new parameter called saltQuery which is defined in context.xml and expects a DQL Query string to get the salt from a specified table.
The hashAlgorithm in context.xml is now being respected and can be given the following values:
- md5
- sha1
- sha256
- sha512
- PASSWORD_BCRYPT
- PASSWORD_DEFAULT
if none of the above is given the password hashing mechanism just returns the password with no hashing.
Can one of the admins verify this patch?
Can one of the admins verify this patch?
Nice, but this might be a good opportunity to drop MD5 support alltogether :)