Open sandrich opened 2 years ago
does it make sense to support both, but prefer rpcauth
?
I think we should support both as many still use the old way.
I was just looking at it. rpcauth contains a HMAC hashed string with a salt. Without the actual password we cannot use rpcauth. Or in other words. If someone has rpcauth defined the person need to provide the rpcpassword via the argument.
Unless someone has a better idea? I think defi-cli uses some sort of an auth cookie but need to investigate this part.
We should acccept
rpcauth
inside the defi.conf sincerpcuser
andrpcpassword
are being deprecated