Skip to content

password sha1 encryption - only use hashed password in database #79

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

UdoHeyn
Copy link

@UdoHeyn UdoHeyn commented Oct 24, 2018

In order to comply with data protection, original passwords should not be stored in the database. Now, only the hashed password is in the database.
I've changed the two places where the password is processed:

  1. while add-user input, before writing to DB
  2. while login-check, after reading from DB to compare the hashed passwords

@slonopotamus
Copy link

lfs-test-server is just a reference LFS protocol implementation. It is not meant for production use. So, the less LFS-unrelated stuff it has the better.

Base automatically changed from master to main February 1, 2021 21:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants