HostedRedmine.com has moved to the Planio platform. All logins and passwords remained the same. All users will be able to login and use Redmine just as before. "Read more...":https://support.plan.io/news/187
Feature #802523
closedRefactor fcdb calls to be more flexible
0%
Description
I want to change the login workflow to something that allows mechanisms other than unsalted md5 passwords. I propose changing user_load to user_exists and user_verify lua calls, where user_verify checks if the password is correct. To maintain compatibility, an md5sum function is exposed to the fcdb lua environment, and the default database.lua file calls it when checking password against database.
Files
Related issues
Updated by Zoltán Žarkov about 4 years ago
Updated by Zoltán Žarkov about 4 years ago
- Related to Task #656466: S3_0 datafile format freeze (d3f) added
Updated by Marko Lindqvist about 4 years ago
Reviewing S3_0 patch: Documentation comment in script_fcdb.c shows that new user_save would now take just one parameter, but it still takes two parameters like before, right?
Updated by Zoltán Žarkov about 4 years ago
- File 0002-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch 0002-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch added
- File 0001-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch 0001-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch added
- Fixed documentation comment on user_save.
Updated by Marko Lindqvist about 4 years ago
- Category set to Server
- Status changed from New to Resolved
Updated by Marko Lindqvist about 4 years ago
- Status changed from Resolved to In Progress
On S3_0 build without enabling auth:
src/server/scripting/script_fcdb.c:194:12: error: ‘md5sum’ defined but not used [-Werror=unused-function]
static int md5sum(lua_State *L)
This build has been configured as:
$ ./config.status --config
'--enable-debug' '--enable-client=gtk3.22' '--enable-fcmp=gtk3'
Updated by Zoltán Žarkov about 4 years ago
- File 0001-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch 0001-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch added
- File 0002-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch 0002-Refactor-fcdb-login-flow-to-allow-better-authenticat.patch added
*Moved HAVE_FCDB #endif to enclose md5sum.
Updated by Marko Lindqvist about 4 years ago
- Status changed from In Progress to Resolved
Updated by Marko Lindqvist about 4 years ago
- Status changed from Resolved to Closed
- Assignee set to Marko Lindqvist