kapua
kapua copied to clipboard
REST - PUT password credential does not encrypt the password
Describe the bug When a password credential is updated via the API REST (PUT request), the password sent is stored in plain text in the database.
The password is, therefore, rejected when used on a new login.
To Reproduce Update the password using PUT request:
Expected behavior The password is processed as in POST request.
Version of Kapua 1..3.1
Type of deployment [x] Docker
Main component affected [X] REST API
Additional context The fields used in this request differs from the ones used on POST (credentialStatus -> status, for instance).
The issue can be easily solved with a DELETE + POST request