Project

General

Profile

Actions

Feature #30271

closed

Refactor login services to separate password transmission and password compare

Added by Helmut Hummel about 13 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Could have
Assignee:
Category:
Backend API
Target version:
Start date:
2011-09-25
Due date:
% Done:

100%

Estimated time:
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Problem:
Currently password transmission and password compare is coupled together so that an auth service always has to implement both.

Solution:
Decouple these actions to be able to clean up the authentication service chain and to make it possible for other services to benefit from RSA encrypted passwords without the need to decrypt it manually.


Related issues 3 (0 open3 closed)

Related to TYPO3 Core - Feature #20382: Implement RSA authentication for BE and FEClosedDmitry Dulepov2009-04-30

Actions
Related to TYPO3 Core - Bug #29130: Security Level "normal" does not work for backend loginClosedHelmut Hummel2011-08-20

Actions
Related to TYPO3 Core - Task #32864: Add note on modified authentication services to NEWS.txtClosedOliver Hader2011-12-29

Actions
Actions #1

Updated by Mr. Hudson about 13 years ago

Patch set 1 of change Ic8ebeaa58d1cc1662083b0799f670b5a79e43971 has been pushed to the review server.
It is available at http://review.typo3.org/5326

Actions #2

Updated by Xavier Perseguers about 13 years ago

  • Target version changed from 4.6.0-RC1 to 4.6.0
Actions #3

Updated by Chris topher about 13 years ago

  • Target version changed from 4.6.0 to 4.6.1
Actions #4

Updated by Chris topher almost 13 years ago

  • Target version changed from 4.6.1 to 4.6.2
Actions #5

Updated by Gerrit Code Review almost 13 years ago

  • Status changed from Accepted to Under Review

Patch set 2 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/5326

Actions #6

Updated by Gerrit Code Review almost 13 years ago

Patch set 3 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/5326

Actions #7

Updated by Gerrit Code Review almost 13 years ago

Patch set 4 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/5326

Actions #8

Updated by Anonymous almost 13 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #9

Updated by Helmut Hummel almost 13 years ago

  • Status changed from Resolved to Under Review
  • Target version changed from 4.6.2 to 1525
  • TYPO3 Version changed from 4.6 to 4.7

not resolved yet. patch has been applied to sandbox only.

Actions #10

Updated by Helmut Hummel almost 13 years ago

  • % Done changed from 100 to 0
Actions #11

Updated by Oliver Hader almost 13 years ago

Just for the records, this was the old RFC that introduced the RSAauth feature to TYPO3 4.3: #20382

Actions #12

Updated by Gerrit Code Review almost 13 years ago

Patch set 5 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/5326

Actions #13

Updated by Helmut Hummel almost 13 years ago

  • Tracker changed from Task to Feature
Actions #14

Updated by Anonymous almost 13 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #15

Updated by Steffen Ritter almost 13 years ago

  • Target version changed from 1525 to 4.7.0-beta1
Actions #16

Updated by Riccardo De Contardi about 7 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF