lfs-test-server icon indicating copy to clipboard operation
lfs-test-server copied to clipboard

Published 20 hours ago • verified publisher icon git-lfs

password sha1 encryption - only use hashed password in database

Open UdoHeyn opened this issue 7 years ago • 1 comments

In order to comply with data protection, original passwords should not be stored in the database. Now, only the hashed password is in the database. I've changed the two places where the password is processed:

  1. while add-user input, before writing to DB
  2. while login-check, after reading from DB to compare the hashed passwords

UdoHeyn avatar Oct 24 '18 09:10 UdoHeyn

lfs-test-server is just a reference LFS protocol implementation. It is not meant for production use. So, the less LFS-unrelated stuff it has the better.

slonopotamus avatar Jun 26 '19 07:06 slonopotamus