andwati/zitadel
1
0
Fork 0
mirror of https://github.com/andwati/zitadel.git synced 2026-10-29 02:22:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(api): integrates drupal7 hash verifier from passwap (#10918)

Browse Source 
# Which Problems Are Solved

- Integrates the Drupal 7 hash verifier from passwap

# Additional Changes

- The docs inform about the option to use the Drupal 7 hash verifier
- Updates passwap to version v0.10.0

# Additional Context

- Follow-up for PR
[#passwap/pull/70](https://github.com/zitadel/passwap/pull/70)

Co-authored-by: Marco A. <[email protected]>
This commit is contained in:
lennartzellmer
2025-10-28 16:26:48 +00:00
committed by GitHub
co-authored by Marco A.
parent 39a29f534a
commit f4503e07cd
3 changed files with 23 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/docs/concepts/architecture/secrets.md
+2 -1
View File
@@ -72,12 +72,13 @@ The following hash algorithms are supported:
- md5plain: md5 digest of a password without salt [^2]
- md5salted: md5 digest of a salted password [^2]
- phpass: md5 digest with PHPass algorithm (used in WordPress) [^2]
- drupal7: Custom hashing format used in Drupal 7 [^2]
- sha2: implementation of crypt(3) SHA-256 & SHA-512
- scrypt
- pbkdf2
[^1]: argon2 algorithms are currently disabled on ZITADEL Cloud due to its steep memory requirements.
[^2]: md5 is insecure and can only be used to import and verify users, not hash new passwords.
[^2]: md5 and drupal7 are insecure and can only be used to import and verify users, not hash new passwords.
:::info
ZITADEL updates stored hashes when the configured algorithm or its parameters are updated,