Project

General

Profile

Actions

Architecture #27292

open

Hash in users xml file is not longer relevant with the drop of unsafe hashes

Added by Clark ANDRIANASOLO 3 days ago. Updated about 20 hours ago.

Status:
New
Priority:
N/A
Category:
Architecture - Code maintenance
Target version:
Effort required:
Small
Name check:
To do
Fix check:
To do
Regression:
No

Description

Since #27128, we no longer support unsafe hashes, and in #26996 the argon2id hash algorithm is added for support.

So, with #24729, passwords are by now checked for users with regex for argon2id and bcrypt format password, so we no longer have a single hash :
  • we could drop this attribute in the XML when migrating the file in 9.0
  • and the check in the server create-user command

Related issues 3 (2 open1 closed)

Related to Rudder - Architecture #24729: Allow using a different password hash algorithm for each local userReleasedAlexis MoussetActions
Related to Rudder - Architecture #27128: Drop support for legacy password hash algorithmsPending releaseFrançois ARMANDActions
Related to Rudder - Bug #27293: rudder server create-user doesn't work with argon2Pending releaseClark ANDRIANASOLOActions
Actions

Also available in: Atom PDF