noobaa-core
noobaa-core copied to clipboard
Noobaa Account: Remove password hashing
Explain the changes
- This PR is attempting to achieve the same target but with different approach.
- We are removing bcrypt code completely and NOT replacing it with any hashing.
- As we have observed that this login/password is not being used by users, we are removing this field completely.
- We are providing the upgrade script - This script will remove "password" field from all the existing accounts, including admin and support.
- At this point of time we are not removing the code which implements password. For example removing password, has_login and other fields from schema.
- Attaching screenshot. This screenshot shows entries in Database. First with 5.17.0 and second is with changes and upgrade script .
- There are few changes which have been done to make sure existing test on password succeed.
- noobaa-operator also sends admin password, which needs to be handled to avoid failure of installation.