GUAC-1109: Do not rely on SHA2(). Handle password hashing in Java.

This commit is contained in:
Michael Jumper committed 2015-03-04 14:23:56 -08:00
1 parent 969db70be9
commit a4a3de002b
3 files changed
+23 -36

No files matched your search

@@ -87,19 +87,6 @@
</select>
<!-- Select single user by credentials -->
<select id="selectOneByCredentials" resultMap="UserResultMap">
SELECT
user_id,
username,
password_hash,
password_salt
FROM guacamole_user
WHERE
username = #{username,jdbcType=VARCHAR}
AND password_hash = UNHEX(SHA2(CONCAT(#{password,jdbcType=VARCHAR}, HEX(password_salt)), 256))
</select>
<!-- Select single user by username -->
<select id="selectOne" resultMap="UserResultMap">