jenkinsci / jenkinsci/http-request-plugin

[JENKINS-67120] Encrypt j_password for form-based authentication

Open
#306 0 comments 0 reactions 0 assignees View on GitHub
component:http-request-plugin imported-jira-issue priority:major resolution:unresolved
Dominant language
Java
Stars
176
Forks
158
Avg merge
1d 16h
Merged PRs (30d)
3

Description

Currently the httpRequest configuration stores any form-based authentication credentials in plain text. Add support for encryption of j_password field to hide the password for users not authorized for the web application being accessed.

---
Originally reported by pcarenza, imported from: Encrypt j_password for form-based authentication


  • assignee: janario
  • status: Open
  • priority: Major
  • component(s): http-request-plugin
  • label(s): authentication, form, http-request
  • resolution: Unresolved
  • votes: 0
  • watchers: 1
  • imported: 20260702-081740

Raw content of original issue

Currently the httpRequest configuration stores any form-based authentication credentials in plain text. Add support for encryption of j_password field to hide the password for users not authorized for the web application being accessed.

  • environment: Jenkins 2.303.1, Windows 10, OpenJDK 11

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.