kapua icon indicating copy to clipboard operation
kapua copied to clipboard

REST - PUT password credential does not encrypt the password

Open pintify opened this issue 4 years ago • 0 comments

Describe the bug When a password credential is updated via the API REST (PUT request), the password sent is stored in plain text in the database.

The password is, therefore, rejected when used on a new login.

To Reproduce Update the password using PUT request:

imagen

Expected behavior The password is processed as in POST request.

Version of Kapua 1..3.1

Type of deployment [x] Docker

Main component affected [X] REST API

Additional context The fields used in this request differs from the ones used on POST (credentialStatus -> status, for instance).

The issue can be easily solved with a DELETE + POST request

pintify avatar Dec 14 '20 11:12 pintify