UCL-ARC / dirac-swift-api

Repository for the REST API side of the DiRAC-SWIFT project
BSD 3-Clause "New" or "Revised" License
2 stars 1 forks source link

Generated hashed passwords for HSDS HTTP authentication #20

Closed harryjmoss closed 1 year ago

harryjmoss commented 1 year ago

If we can't use bearer token based auth (or JWT), then we will need to store username/password combinations.

After discussions with @PeterAndrewBriscoe, we definitely don't want to store plaintext passwords. Some solution might be found in storing a combined username + password + salt in a file, which is then used to compared against the same hashed combination when users authenticate.

Depends on progress (or lack thereof) on #19