Enhance security of initial admin password
Open
enhancement
f/security
- Dominant language
- Java
- Stars
- 593
- Forks
- 123
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 4
Description
We can now provide an initial admin password inside an environment variable which is really a good point for the security of the application.
To go further, we should be able to provide an encrypted or hashed (ex: bcrypt) password instead of a clear one injected inside an environment variable.
This way, this password would never be discovered, even by someone who has acces to the host running the mesh process.
Contributor guide
Assessment
This issue has not been assessed yet.