envoyproxy / envoyproxy/envoy

Add bcrypt hashes support to basic_auth filter

Open
#36,278 30 comments 13 reactions 0 assignees View on GitHub
enhancement help wanted
Dominant language
C++
Stars
28.9k
Forks
5.6k
Avg merge
1d 20h
Merged PRs (30d)
437

Description

Currently the auth_basic filter only supports SHA hashed passwords.

ExternalSecrets provide a htpasswd templating function from sprig that generates only bcrypt hashes

Supporting brcypt hashes for basic_auth will improve security and simplify the workflow I use -> `hashicorp vault>external secret>k8s secret>envoy gateway securitypolicy>envoy basic_auth filter`

https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/basic_auth_filter#configuration
https://masterminds.github.io/sprig/crypto.html
https://external-secrets.io/latest/guides/templating/

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.