noobaa-core icon indicating copy to clipboard operation
noobaa-core copied to clipboard

Noobaa Account: Remove password hashing

Open aspandey opened this issue 6 months ago • 4 comments

1-remove-bcrypt

Explain the changes

  1. This PR is attempting to achieve the same target but with different approach.
  2. We are removing bcrypt code completely and NOT replacing it with any hashing.
  3. As we have observed that this login/password is not being used by users, we are removing this field completely.
  4. We are providing the upgrade script - This script will remove "password" field from all the existing accounts, including admin and support.
  5. At this point of time we are not removing the code which implements password. For example removing password, has_login and other fields from schema.
  6. Attaching screenshot. This screenshot shows entries in Database. First with 5.17.0 and second is with changes and upgrade script .
  7. There are few changes which have been done to make sure existing test on password succeed.
  8. noobaa-operator also sends admin password, which needs to be handled to avoid failure of installation.

aspandey avatar Aug 06 '24 04:08 aspandey