podd / podd-redesign

The redesigned PODD
http://podd.plantphenomics.org.au/podd/
GNU Affero General Public License v3.0
3 stars 4 forks source link

Store passwords as hashes in database #133

Closed ansell closed 10 years ago

ansell commented 10 years ago

Store passwords hashed in the database to prevent accidental leakage of raw user passwords.

Being implemented here: https://github.com/podd/podd-redesign/tree/hashing

ansell commented 10 years ago

Current bugs relate to support HTTP DIGEST, which seems to require the database to contain (or be able to derive) the raw secret.