[#APF-981] Password in plain text after change password

AppFuse

Password in plain text after change password

Created: 12/Dec/07 06:43 PM Updated: 07/Jan/08 11:13 AM

Component/s:

Web - Struts

Affects Version/s:

2.0.1

Fix Version/s:

None

Environment:

struts2, Mac X and Linux, mysql, Jetty and Tomcat, Java 5 and Java 6

Description

« Hide

When you update a user's password this is stored in plain text in the database.

All

Comments

Change History

FishEye

Sort Order:

[ Permlink | « Hide ]

Matt Raible - 12/Dec/07 11:30 PM

Please provide the steps to reproduce this issue - starting from creating the project. Thanks.

[ Permlink | « Hide ]

John Kwon - 13/Dec/07 12:42 PM

Take a look in your security.xml file, and see which password encoder is specified.

[ Permlink | « Hide ]

J. David Mendoza R. - 06/Jan/08 08:01 AM

I've just created a new app with the 2.0.1 archetype and changed the password to reproduce the error, and it works perfectly, so I must of broke something with the application that's doing this. Sorry...