Project

General

Profile

Actions

Architecture #27292

open

Hash in users xml file is not longer relevant with the drop of unsafe hashes

Added by Clark ANDRIANASOLO 3 days ago. Updated about 14 hours ago.

Status:
New
Priority:
N/A
Category:
Architecture - Code maintenance
Target version:
Effort required:
Small
Name check:
To do
Fix check:
To do
Regression:
No

Description

Since #27128, we no longer support unsafe hashes, and in #26996 the argon2id hash algorithm is added for support.

So, with #24729, passwords are by now checked for users with regex for argon2id and bcrypt format password, so we no longer have a single hash :
  • we could drop this attribute in the XML when migrating the file in 9.0
  • and the check in the server create-user command

Related issues 3 (2 open1 closed)

Related to Rudder - Architecture #24729: Allow using a different password hash algorithm for each local userReleasedAlexis MoussetActions
Related to Rudder - Architecture #27128: Drop support for legacy password hash algorithmsPending releaseFrançois ARMANDActions
Related to Rudder - Bug #27293: rudder server create-user doesn't work with argon2Pending releaseClark ANDRIANASOLOActions
Actions #1

Updated by Clark ANDRIANASOLO 3 days ago

  • Related to Architecture #24729: Allow using a different password hash algorithm for each local user added
  • Related to Architecture #27128: Drop support for legacy password hash algorithms added
Actions #2

Updated by Clark ANDRIANASOLO 3 days ago

Beware of #27293 in which the attribute is checked

Actions #3

Updated by Clark ANDRIANASOLO 3 days ago

  • Related to Bug #27293: rudder server create-user doesn't work with argon2 added
Actions #4

Updated by Clark ANDRIANASOLO 3 days ago

  • Description updated (diff)
Actions #5

Updated by Félix DALLIDET about 14 hours ago

  • Target version changed from 9.0.0~alpha1 to 9.0.1
Actions

Also available in: Atom PDF