Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add userHash validation for the user import endpoint #1550

Closed
seluianova opened this issue Jul 29, 2024 · 0 comments · Fixed by #1597
Closed

Add userHash validation for the user import endpoint #1550

seluianova opened this issue Jul 29, 2024 · 0 comments · Fixed by #1597
Assignees
Milestone

Comments

@seluianova
Copy link
Contributor

seluianova commented Jul 29, 2024

Is your feature request related to a problem? Please describe.
Follow up for #1433
Implement isValidUserHash() function in UserImportHandler

Describe the solution you'd like

  • parse userHash string
  • verify params:
$argon2id: means which algorithm is used
v=19: means which version is used
m=16 means which memory costs are used
t = 2 means which number of iterations are used
p = 1 means which numer of paralellis is used

We can probably re-use somethong from decode() function here:
https://github.com/spring-projects/spring-security/blob/main/crypto/src/main/java/org/springframework/security/crypto/argon2/Argon2EncodingUtils.java

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Archived in project
Development

Successfully merging a pull request may close this issue.

1 participant