inventage / keycloak-password-hashprovider-extension

The Keycloak password hashprovider extension enables Keycloak to support other password hashing algorithm than the built-in PBKDF2.

Home Page:https://keycloak.ch

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Argon2 password encoding

tangkevkev opened this issue · comments

Currently we only support validation of existing Argon2 password hashes. To be able to migrate a user's password to Argon2, the implementation of the two methods encode and encodedCredential in the ArgonPasswordHashProvider class is required.

If we want to support custom parameters (which argon version, salt length, etc), we would need to implement custom PasswordPolicyProvider as well.