search

mkhorasani / Streamlit-Authenticator

A secure authentication module to manage user access in a Streamlit application.
Other
1.56k stars 248 forks source link

option to disable hashing #25

Closed batmanscode closed 2 years ago

batmanscode commented 2 years ago

Hi, thanks for creating this component! I find the cookie authentication very useful.

I am storing the config as a streamlit secret so it is not necessary to hash the passwords. Is it possible to disable this? Right now I am getting an invalid salt error when I try to use plain text passwords.

mkhorasani commented 2 years ago

Hi @batmanscode, I'm glad that you find it to be helpful. As a rule of thumb passwords should NEVER be unhashed. It is simply far too risky not to hash them. Consequently, I never even contemplated enabling such a feature, however, if you really want to, you can do so by modifying the source code - that particular feature is implemented in the authenticate.py script. Cheers.

batmanscode commented 2 years ago

Hi @batmanscode, I'm glad that you find it to be helpful. As a rule of thumb passwords should NEVER be unhashed. It is simply far too risky not to hash them. Consequently, I never even contemplated enabling such a feature, however, if you really want to, you can do so by modifying the source code - that particular feature is implemented in the authenticate.py script. Cheers.

Thank you. I was wondering since they will be stored as environment variables and not a database