Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support password hashes in Change Passwords API #75455

Closed
jkakavas opened this issue Jul 19, 2021 · 2 comments
Closed

Support password hashes in Change Passwords API #75455

jkakavas opened this issue Jul 19, 2021 · 2 comments
Labels
>enhancement :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) Team:Security Meta label for security team

Comments

@jkakavas
Copy link
Member

We should allow users to call our Change Passwords API by passing a hash of the desired password value instead of the actual password itself. We support this already for the Put Users API . Use cases for this can include:

relates: #34729

@jkakavas jkakavas added :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) >enhancement labels Jul 19, 2021
@elasticmachine elasticmachine added the Team:Security Meta label for security team label Jul 19, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@jkakavas
Copy link
Member Author

This was implemented in #75500

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
>enhancement :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) Team:Security Meta label for security team
Projects
None yet
Development

No branches or pull requests

2 participants