authentik icon indicating copy to clipboard operation
authentik copied to clipboard

Allow passing a password hash instead of a plaintext password when bootstrapping akadmin account

Open RyanSquared opened this issue 2 years ago • 0 comments

Is your feature request related to a problem? Please describe. When bootstrapping Authentik, the AUTHENTIK_BOOTSTRAP_PASSWORD field can be used to set the default password for the akadmin account. This requires a password to be stored in plaintext when not using a secrets manager.

Describe the solution you'd like When creating an Authentik setup, I should be able to set the environment variable, AUTHENTIK_BOOTSTRAP_PSASWORD_HASH, which accepts a password hash that could, for example, be created from the command line.

Describe alternatives you've considered I have noticed the AUTHENTIK_BOOTSTRAP_TOKEN field but this was mentioned to only provide API access and has the same issue of leaving an authentication secret in plaintext.

RyanSquared avatar May 03 '23 20:05 RyanSquared