[jboss-jira] [JBoss JIRA] (ELY-816) Support for masked passwords in client XML config

Jan Kalina (JIRA) issues at jboss.org
Mon May 7 05:53:00 EDT 2018


    [ https://issues.jboss.org/browse/ELY-816?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13571967#comment-13571967 ] 

Jan Kalina commented on ELY-816:
--------------------------------

When considering PR, there is only one place left in elytron xml where clear password is supported but masked is not: *credential-store-reference-type* - but everywhere this type is used, clear-password-type and masked-password-type are allowed too.
>From this point of view, not only masked-text, but also *clear-text* in credential-store-reference-type seems redundant.

[~dmlloyd] Do we want to add the masked-text through? And do we want to keep the clear-text?

https://github.com/hkalina/wildfly-elytron/blob/maskedpasswords/src/main/resources/schema/elytron-client-1_2.xsd#L623

> Support for masked passwords in client XML config
> -------------------------------------------------
>
>                 Key: ELY-816
>                 URL: https://issues.jboss.org/browse/ELY-816
>             Project: WildFly Elytron
>          Issue Type: Task
>            Reporter: David Lloyd
>            Assignee: Jan Kalina
>            Priority: Critical
>             Fix For: 1.3.2.CR1
>
>
> We need a way to support masked passwords in the auth configuration file, either as:
> * A dedicated masked-password-type XML type
> * Adding necessary fields to hashed-password-type
> * Adding a modular crypt format
> Needs to be supported anywhere passwords are allowed.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list