Skip to content

Stop storing passwords reversibly and fail fast on weak JWT secrets (audit #2 & #3)#728

Merged
KrzysztofPajak merged 4 commits into
developfrom
security/crypto-secrets-hardening
Jul 5, 2026
Merged

Stop storing passwords reversibly and fail fast on weak JWT secrets (audit #2 & #3)#728
KrzysztofPajak merged 4 commits into
developfrom
security/crypto-secrets-hardening

Detect API user password format from the stored hash, not PrivateKey

0ac70b3
Select commit
Loading
Failed to load commit list.
Azure Pipelines / grandnode.grandnode2 failed Jul 5, 2026 in 49m 20s

Build #20260705.41 failed

Details

Tests

  • Failed: 0 (0.00%)
  • Passed: 1,703 (99.71%)
  • Other: 5 (0.29%)
  • Total: 1,708