Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encrypt/hash password in config #394

Closed
fonix232 opened this issue Oct 18, 2018 · 4 comments
Closed

Encrypt/hash password in config #394

fonix232 opened this issue Oct 18, 2018 · 4 comments

Comments

@fonix232
Copy link

Currently, the password is stored as cleartext in the config file. I'd like to suggest to move to an encrypted/hashed password instead, similar to how e.g. Transmission manages it. This way the password cannot be easily read by a malicious process (I understand that with proper access rules it's unlikely to happen, but I personally would feel safer if my password wasn't available in cleartext).

@ameshkov
Copy link
Member

That'd be possible when we migrate from the current basic HTTP authentication to something more complicated

@DavidTai780
Copy link

If the hash password was applied, will AGH update with change password setting page ?

@ameshkov
Copy link
Member

ameshkov commented Oct 7, 2019

Sure, it will in one of the future updates.

@ameshkov ameshkov modified the milestones: v0.100, v0.99 Oct 7, 2019
@ameshkov
Copy link
Member

ameshkov commented Oct 7, 2019

Actually, this task is done in v0.99 beta.

Profile settings will be done in the future updates.

@ameshkov ameshkov closed this as completed Oct 7, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants