You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (JIRA)" <ji...@apache.org> on 2016/10/03 10:51:20 UTC

[jira] [Updated] (SYNCOPE-946) Encrypted attribute values not managed as password values

     [ https://issues.apache.org/jira/browse/SYNCOPE-946?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Francesco Chicchiriccò updated SYNCOPE-946:
-------------------------------------------
    Component/s: enduser

> Encrypted attribute values not managed as password values
> ---------------------------------------------------------
>
>                 Key: SYNCOPE-946
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-946
>             Project: Syncope
>          Issue Type: Bug
>          Components: console, enduser
>    Affects Versions: 2.0.0
>            Reporter: Francesco Chicchiriccò
>            Assignee: Francesco Chicchiriccò
>             Fix For: 2.0.1, 2.1.0
>
>
> When editing an user / group / any object with an encrypted attribute, the value is treated as plain text.
> How to reproduce:
>  # create an Encrypted schema {{sharedPassword}}
>  # create an user, and set the {{secret}} value for {{sharedPassword}}
>  # edit such user from the admin console: the value for {{sharedPassword}} will be the encrypted string
> As a result, when clicking on Finish, the encrypted value will be sent again to the core, which will then encrypt it again.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)