appserver icon indicating copy to clipboard operation
appserver copied to clipboard

Added support for salting

Open AW3i opened this issue 9 years ago • 3 comments

I've added support for hash salting and support for more hashing algorithms.

There's a new parameter called saltQuery which is defined in context.xml and expects a DQL Query string to get the salt from a specified table.

The hashAlgorithm in context.xml is now being respected and can be given the following values:

  • md5
  • sha1
  • sha256
  • sha512
  • PASSWORD_BCRYPT
  • PASSWORD_DEFAULT

if none of the above is given the password hashing mechanism just returns the password with no hashing.

AW3i avatar Oct 19 '16 12:10 AW3i

Can one of the admins verify this patch?

appserver-ci avatar Oct 19 '16 12:10 appserver-ci

Can one of the admins verify this patch?

appserver-ci avatar Oct 19 '16 12:10 appserver-ci

Nice, but this might be a good opportunity to drop MD5 support alltogether :)

wick-ed avatar Oct 19 '16 16:10 wick-ed