]
Darran Lofthouse updated ELY-638:
---------------------------------
Component/s: HTTP
Add support for hashed usernames.
---------------------------------
Key: ELY-638
URL:
https://issues.jboss.org/browse/ELY-638
Project: WildFly Elytron
Issue Type: Enhancement
Components: API / SPI, HTTP
Reporter: Darran Lofthouse
Fix For: 2.0.0.Alpha1
The latest HTTP Digest RFC
https://datatracker.ietf.org/doc/rfc7616/ adds support for
hashed usernames.
https://tools.ietf.org/html/rfc7616#page-12
Passing in this hash within the name field of IdentityLocator may be suitable for a realm
to map - alternatively NameRewriters and RealmMappers may be needed to handle some of
this, or IdentityLocator could be extended to add fields for hashed username and
algorithm. Or other options.
Have scheduled for Elytron 2 as this is a new optional part of the RFC. It may turn out
to be a feature of a mech never used but general support for an alternative form of a
username like this sounds reasonable.