fix: Update Password Encoder Algorithm - Meeds-io/MIPs#69

Remove the unused class DigestAuthenticationTomcatLoginModule Update DefaultLoginModule to remove password from memory storage as privateCredential. It is not used, and we not need it
Meeds-io · Sep 11, 2023 · b5a441d · b5a441d
1 parent c56048b
commit b5a441d
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 254 deletions.
diff --git a/...in/java/org/exoplatform/services/security/j2ee/DigestAuthenticationTomcatLoginModule.java b/...in/java/org/exoplatform/services/security/j2ee/DigestAuthenticationTomcatLoginModule.java
diff --git a/...ecurity.core/src/main/java/org/exoplatform/services/security/jaas/DefaultLoginModule.java b/...ecurity.core/src/main/java/org/exoplatform/services/security/jaas/DefaultLoginModule.java
@@ -119,8 +119,6 @@ public boolean login() throws LoginException
             username = authenticator.validateUser(credentials);
             identity = authenticator.createIdentity(username);
             sharedState.put("javax.security.auth.login.name", username);
-
-            subject.getPrivateCredentials().add(password);
             subject.getPublicCredentials().add(new UsernameCredential(username));
          }
          return true;