Uploaded image for project: 'MusicBrainz Server'
  1. MusicBrainz Server
  2. MBS-357

Don't store passwords in clear text

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: High High
    • 2013-06-10
    • NGS - Beta 1
    • Web service
    • None

      The password column in the editor table should be converted to be a MD5 hash that conforms to the HTTP digest auth specification. We should use this catalyst module for authenticating our Web Service use auth:

      http://search.cpan.org/~dhoss/Catalyst-Authentication-Credential-HTTP-1.011/lib/Catalyst/Authentication/Credential/HTTP.pm

      since that method will allow us to use simple digest auth for the web service. Aside from the web service, all the user login/password changing functions need to be updated for use with MD5 passwords.

      This was bug #157 in trac.

            acid2 Oliver Charles
            rob Robert Kaye
            Votes:
            21 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved:

                Version Package
                2013-06-10