[jboss-jira] [JBoss JIRA] (ELY-716) Password Transformations

Darran Lofthouse (JIRA) issues at jboss.org
Thu Nov 3 07:10:00 EDT 2016


Darran Lofthouse created ELY-716:
------------------------------------

             Summary: Password Transformations
                 Key: ELY-716
                 URL: https://issues.jboss.org/browse/ELY-716
             Project: WildFly Elytron
          Issue Type: Enhancement
          Components: API / SPI
            Reporter: Darran Lofthouse
            Assignee: David Lloyd
             Fix For: 2.0.0.Alpha1


There may be reasons that still make this impossible so some research will be required first.

However take mechanisms like Digest SASL: -

https://github.com/wildfly-security/wildfly-elytron/blob/master/src/main/java/org/wildfly/security/sasl/digest/AbstractDigestMechanism.java#L620

Here the mechanism queries different password types and converts as needed.

Instead the mechanism should be able to query the most specific time and a set of registered transformers kick in to convert between the different types.

The credential support methods should also take into account transformations that the transformers can perform.

The one thing however that may make this impossible is if the specific form of a credential needs additional information e.g. the mechanism could support arbitrary realms and use it to create the digested form.




--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list