gentics / gentics/mesh

Enhance security of initial admin password

Open
#998 1 comment 0 reactions 0 assignees View on GitHub
enhancement f/security
Dominant language
Java
Stars
593
Forks
123
Avg merge
2d 18h
Merged PRs (30d)
4

Description

We can now provide an initial admin password inside an environment variable which is really a good point for the security of the application.
To go further, we should be able to provide an encrypted or hashed (ex: bcrypt) password instead of a clear one injected inside an environment variable.

This way, this password would never be discovered, even by someone who has acces to the host running the mesh process.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.