Comments (2)
Now all you see in the table is standard "crypt" formatted PBKDF2 format passwords (auto generated by perl, with extra parsing on the java side to use this format)
web_apollo_users=# select * from users;
user_id | username | password
---------+-----------------------+-------------------------------------------------------------
1 | testing | $PBKDF2$HMACSHA1:1000:S72Ljw==$2JMYOsFrwysKraUjTW45AsxWqFA=
2 | testing2 | $PBKDF2$HMACSHA1:1000:US9AWg==$o/Jb6DTZ42H879BDLWuC78RezDg=
3 | testing3 | $PBKDF2$HMACSHA1:1000:9gxUgw==$pudy3B4ECVsbM1raJq7Xthqd+G4=
4 | testing4 | $PBKDF2$HMACSHA1:1000:7aDz2w==$5cEmNl+jERZ0vvysKktw9jnPuoM=
5 | testing5 | $PBKDF2$HMACSHA1:1000:TEU9EQ==$3d0wJo+4p/mwyOJiM/qVy3LItAQ=
We can document this but the benefit is that all you do is add a -e or --encrypted flag when running add-user or change-password commands
Also there is the encrypt_user_passwords.pl script that will upgrade a non-encrypted database to an encrypted one
Also, this change doesn't disrupt people who are upgrading and they don't want to upgrade. They can go on using LocalDbUserAuthentication instead of EncryptedLocalDbUserAuthentication in their config file.
from apollo.
there was interest from @spficklin to add drupal hash authentication as well. this could be implemented in a similar method to this from http://stackoverflow.com/questions/11736555/java-autentication-of-drupal-passwords
from apollo.
Related Issues (20)
- Unable to create combination tracks HOT 2
- log4j vulnerability: afaict we're safe? HOT 6
- imported annotations not populating annotations tab HOT 12
- Get gene sequence HOT 2
- CDS features not appearing when written via annotations._check_write HOT 1
- Upgrade to more modern versions of dependencies? HOT 3
- Add pop up to Fmin and Fmax radial button area in annotator panel
- How to install Apollo in Windows?
- [Feature request] Update owner info from web services
- Download all the manual curation history from Apollo? HOT 1
- new install error? HOT 2
- High vulnerability caused by Apache Shiro HOT 7
- OpenID/Oath support HOT 1
- Web service calls for ShowStatus and Update status not working as expected HOT 1
- Request: Video Tutorial for configuring with H2 Apollo (and perhaps any of the other two too)
- Refactor to support Postgres greater than 11 HOT 3
- IT just sent us the latest vulnerability report. Two dependencies need updating. HOT 1
- load_gff3 miscalculates CDS HOT 4
- Range Error when adding BAM track HOT 1
- Cannot get property 'sequence' on null object HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from apollo.