Skip to content

Remove /hash endpoint #386

Description

@gctucker

The /hash endpoint was initially required in order to create new user entries. We now have api.admin to create an admin user directly in the Mongo database, which can then be used to create new users. The /hash endpoint causes some potential security issue as it facilitates brute-force password attacks. Hashed passwords rely on the internal secret key which is specific to each API instance.

  • /hash endpoint removed from api.main
  • unit tests updated accordingly
  • end-to-end tests updated accordingly

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions