apache / apache/incubator-seata

feature: Initialize account password on first access

Open
#6,423 0 comments 0 reactions 1 assignee Claimed by @liuqiufeng View on GitHub
module/console module/server Security
Dominant language
Java
Stars
26k
Forks
8.8k
Avg merge
1d 8h
Merged PRs (30d)
4

Description

## Why you need it?
Is your feature request related to a problem? Please describe in details

目前seata的账号密码是在server中配置,且提供了默认值。在大部分情况下,用户可能不会调整该值,有一定安全风险。
希望提供在首次访问时,强制初始化账号密码的功能,确保用户不会使用默认账号密码。
初始化的账号密码,按照用户配置的存储方式存储。

Currently the account password for seata is configured in the server and a default value is provided. In most cases, users may not adjust this value, which is a security risk. We would like to provide a function to force the initialization of the account password when accessing for the first time, to ensure that the user will not use the default account password. The initialized account password is stored according to the storage method configured by the user.

## How it could be?
A clear and concise description of what you want to happen. You can explain more about input of the feature, and output of it.

## Other related information
Add any other context or screenshots about the feature request here.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.