inventage / keycloak-password-hashprovider-extension

The Keycloak password hashprovider extension enables Keycloak to support other password hashing algorithm than the built-in PBKDF2.

Home Page:https://keycloak.ch

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

BCrypt Password Encoding

tangkevkev opened this issue · comments

Currently we only support validation of existing BCrypt password hashes. To be able to migrate a user's password to BCrypt, the implementation of the two methods encode and encodedCredential in the Typo3BCryptPasswordHashProvider class is required.

If we want to support custom parameters (which bcrypt version, salt length, etc), we would need to implement custom PasswordPolicyProvider as well.