puffinrocks / puffin

lightweight webapp catalog based on containers, with user interface à la mobile app store
GNU Affero General Public License v3.0
89 stars 20 forks source link

Feature Request: Custom Random Passwords #23

Open Jeeppler opened 6 years ago

Jeeppler commented 6 years ago

I saw that the default admin passwords in puffin.rocks are password and admin etc. Keeping the principle of secure by default in mind, I would love to see random generated administrator passwords. The passwords should be displayed in the application page.

screenshot-2018-6-4 puffin redmine

For example, in the screenshot above instead of password: admin, there would be password: bN$bg5t67ujh45hbni98/&ZHJ&Tv. Each password should be generated during the container start phase and displayed to the user.

loomchild commented 6 years ago

You are right, good suggestion. I will look into this at some point.

It would be even better to have something like SSO (which was my original idea), but this will take longer to implement.