ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Flaviu Mates	be14a9242e	TT#84337 - Implement /api/passwordreset * The new endpoint will only accept POSTs * The request body should have two parameters called 'type', 'username' and 'domain' * 'type' will accept either 'administrator', in which case only 'username' is needed, or 'subscriber', in which case 'username' and 'domain' will be needed * The regular password reset email will be sent to either the admin or the subscriber Change-Id: If1457c8c625a95295e5e93b6637927e3905698d9	5 years ago
Flaviu Mates	6c645490e6	TT#84453 - Fix error when subscriber logs in on old CSC * Add check for existence of webpassword on subscriber log in to prevent the code from trying to use the undefined password * Subscribers with no webpassword cannot log in the old CSC Change-Id: I7b82c014fa5f70fa36ee7282db94a747e54ce2ae	5 years ago
Andreas Granig	8f8e1d5fc9	TT#78557 - Use bcrypt to hash webpassword * Change the way webpassword is handled accross NGCP Panel UI/API to comply with new password encryption * At login, if password is not encrypted with high cost due to the ngcp-bcrypt-webpassword script, encrypt it with proper cost * Accept old password format as well until all webpasswords are encrypted Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5	5 years ago

Author

SHA1

Message

Date

Flaviu Mates

be14a9242e

TT#84337 - Implement /api/passwordreset

* The new endpoint will only accept POSTs
         * The request body should have two parameters
           called 'type', 'username' and 'domain'
	 * 'type' will accept either 'administrator',
	   in which case only 'username' is needed,
	   or 'subscriber', in which case 'username'
	   and 'domain' will be needed
         * The  regular password reset email will be sent
	   to either the admin or the subscriber

Change-Id: If1457c8c625a95295e5e93b6637927e3905698d9

Flaviu Mates

6c645490e6

TT#84453 - Fix error when subscriber logs in on old CSC

* Add check for existence of webpassword on subscriber
	   log in to prevent the code from trying to use the
	   undefined password
	 * Subscribers with no webpassword cannot log in the old CSC

Change-Id: I7b82c014fa5f70fa36ee7282db94a747e54ce2ae

Andreas Granig

8f8e1d5fc9

TT#78557 - Use bcrypt to hash webpassword

* Change the way webpassword is handled accross
	   NGCP Panel UI/API to comply with new password
	   encryption
	 * At login, if password is not encrypted with
	   high cost due to the ngcp-bcrypt-webpassword
	   script, encrypt it with proper cost
	 * Accept old password format as well until all
	   webpasswords are encrypted

Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5

3 Commits (mr9.0.1)