psi-4ward / psitransfer

Simple open source self-hosted file sharing solution.
BSD 2-Clause "Simplified" License
1.5k stars 217 forks source link

Store hashed password in json files #239

Open datze opened 2 years ago

datze commented 2 years ago

Wouldn't it be better to store the passwords in the json files not as plain-text but hashed? (eg "password": "14758f1afd44c09b7992073ccf00b43d", instead of "password": "foobar",)

If the JSON files get lost and the passwords are used for other services on the same machine (yes, not good!), they could be attacked.

psi-4ward commented 2 years ago

Valid. Would you prepare a pr?