search

kalcaddle / kodbox

kodbox is a file manager for web. It is a newly designed product based on kodexplorer. It is also a web code editor, which allows you to develop websites directly within the web browser.You can run kodbox either online or locally,on Linux, Windows or Mac based platforms
https://kodcloud.com
2.18k stars 373 forks source link

kodbox API中单点登录 #240

Closed jdysya closed 9 months ago

jdysya commented 9 months ago

文档中是将密码明文包含在GET请求的URL中，这样不太安全。

我在网页控制台发现，网页版中对于该接口调用的是POST请求，且传入的字段并不是明文密码，想问下这个密码是用什么方式进行加密的？

image
kalcaddle commented 9 months ago

自己实现的一个加密方法,具体逻辑见: https://github.com/kalcaddle/kodbox/blob/main/app/controller/user/index.class.php#L292C3-L294 https://github.com/kalcaddle/kodbox/blob/main/app/kod/Mcrypt.class.php#L29-L125