[TYPO3-core] RFC: Feature Request #7139: Integration of fe_users password encryption

[Steffen Kamper]

Type: Feature

Branches: Trunk only

BT reference: http://bugs.typo3.org/view.php?id=7139

Problem:
fe_users password is only in plain mode

Solution:
 using a simple flag
$TYPO3_CONF_VARS['FE']['passwordType'] = 'plain|md5';

authentification takes care and in case of md5 compares to md5-value.

In BE eval of fe_users field password looks to this flag too, so saving user 
password in BE with flag set to md5 will save it to md5 value

Additional:
The solution seems to be very easy. If any auth-service overrides it, new 
service has to take care of. please check if there are side effects.

vg  Steffen 


begin 666 20080113_feuser_password_encryption.diff
M26YD97 at Z('0S;&EB+V-L87-S+G0S;&EB7W5S97)A=71H+G!H< T*/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/0T*+2TM('0S;&EB+V-L87-S+G0S;&EB7W5S97)A
M=71H+G!H< DH<F5V:7-I;VX@,C at X,BD-"BLK*R!T,VQI8B]C;&%S<RYT,VQI
M8E]U<V5R875T:"YP:' )*'=O<FMI;F<@8V]P>2D-"D! ("TQ,#4Q+#8@*S$P
M-3$L-R! 0 T*( D@*B! <F5T=7)N"6)O;VQE86X)"71R=64@:68@;&]G:6X@
M9&%T82!M871C:&5D"B )("HO"B )9G5N8W1I;VX at 8V]M<&%R955I9&5N="@D
M=7-E<BP@)&QO9VEN1&%T82P@)'-E8W5R:71Y7VQE=F5L/2<G*2!["BL)"6=L
M;V)A;" D5%E03S-?0T].1E]605)3.PH@"B )"21/2R ]($9!3%-%.PH@"0DD
M<V5C=7)I='E?;&5V96P@/2 D<V5C=7)I='E?;&5V96P@/R D<V5C=7)I='E?
M;&5V96P at .B D=&AI<RT^<V5C=7)I='E?;&5V96P["D! ("TQ,#<T+#8@*S$P
M-S4L,3(@0$ -"B )"0D)?0H@"0D)8G)E86L["B )"0ED969A=6QT. at DO+R!N
M;W)M86P**PD)"0EI9B at D=&AI<RT^;&]G:6Y4>7!E(#T]("=&12<I('L**PD)
M"0D):68@*"1465!/,U]#3TY&7U9!4E-;)T9%)UU;)W!A<W-W;W)D5'EP92==
M(#T]("=M9#4G*2!["BL)"0D)"0DD;&]G:6Y$871A6R=U:61E;G0G72 ](&UD
M-2 at D;&]G:6Y$871A6R=U:61E;G0G72D["BL)"0D)"7T**PD)"0E]"BL*( D)
M"0EI9B H*'-T<FEN9RDD;&]G:6Y$871A6R=U:61E;G0G72 ]/3T@*'-T<FEN
M9RDD=7-E<ELD=&AI<RT^=7-E<FED96YT7V-O;'5M;ETI"7L*( D)"0D))$]+
M(#T at 5%)513L*( D)"0E]"DEN9&5X.B!T,VQI8B]C;VYF:6=?9&5F875L="YP
M:' -"CT]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T-"BTM+2!T,VQI8B]C;VYF:6=?
M9&5F875L="YP:' )*')E=FES:6]N(#(X.#(I#0HK*RL@=#-L:6(O8V]N9FEG
M7V1E9F%U;'0N<&AP"2AW;W)K:6YG(&-O<'DI#0I 0" M,C(S+#<@*S(R,RPX
M($! #0H@"0DG:&ED95!A9V5S269.;W14<F%N<VQA=&5D0GE$969A=6QT)R ]
M/B!&04Q312P)+R\@268 at 5%)512P@<&%G97,@=&AA="!H87,@;F\@=')A;G-L
M871I;VX@=VEL;"!B92!H:61D96X at 8GD@9&5F875L="X at 0F%S:6-A;&QY('1H
M:7,@=VEL;"!I;G9E<G-E('1H92!E9F9E8W0@;V8@=&AE('!A9V4@;&]C86QI
M>F%T:6]N('-E='1I;F<@(DAI9&4@<&%G92!I9B!N;R!T<F%N<VQA=&EO;B!F
M;W(@8W5R<F5N="!L86YG=6%G92!E>&ES=',B('1O(")3:&]W('!A9V4 at 979E
M;B!I9B!N;R!T<F%N<VQA=&EO;B!E>&ES=',B"B )"2=E241?:6YC;'5D92<@
M/3X at 87)R87DH*2P)"0D)+R\@07)R87D@;V8@:V5Y+W9A;'5E('!A:7)S('=H
M97)E(&ME>2!I<R B='A?6V5X=%U?6V]P=&EO;F%L('-U9F9I>%TB(&%N9"!V
M86QU92!I<R!R96QA=&EV92!F:6QE;F%M92!O9B!C;&%S<R!T;R!I;F-L=61E
M+B!+97D@:7,@=7-E9"!A<R B/V5)1#TB(&9O<B!I;F1E>%]T<RYP:' @=&\@
M:6YC;'5D92!T:&4 at 8V]D92!F:6QE('=H:6-H(')E;F1E<G,@=&AE('!A9V4@
M9G)O;2!T:&%T('!O:6YT+B H57-E9G5L(&9O<B!F=6YC=&EO;F%L:71Y('1H
M870@<F5Q=6ER97, at 82!L;W<@:6YI=&EA;&EZ871I;VX at 9F]O='!R:6YT+"!E
M9RX at 9G)O;G1E;F0 at 86IA>"!A<'!L:6-A=&EO;G,I"B )"2=80TQ!4U,G(#T^
M($%R<F%Y*"DL"0D)"0DO+R!3964@)TEN<VED92!465!/,R<@9&]C=6UE;G0@
M9F]R(&UO<F4@:6YF;W)M871I;VXN"BT)"2=P86=E0V%C:&54;T5X=&5R;F%L
M1FEL97,G(#T^($9!3%-%"0DO+R!)9B!S970L('!A9V4 at 8V%C:&4 at 96YT<FEE
M<R!W:6QL(&)E('-T;W)E9"!I;B!T>7!O,W1E;7 O8V%C:&5?<&%G97,O86(O
M(&EN<W1E860@;V8@=&AE(&1A=&%B87-E+B!3=&EL;"P@(F-A8VAE7W!A9V5S
M(B!W:6QL(&)E(&9I;&QE9"!I;B!D871A8F%S92!B=70@=&AE(")(5$U,(B!F
M:65L9"!W:6QL(&)E(&5M<'1Y+B!7:&5N('1H92!C86-H92!I<R!F;'5S:&5D
M('1H92!F:6QE<R!I;B!C86-H95]P86=E<R]A8B\@=VEL;"!N;W0 at 8F4@9FQU
M<V@@+2!Y;W4@=VEL;"!H879E('1O(&=A<F)A9V4 at 8VQE86X@;6%N=6%L;'D@
M;VYC92!I;B!A('=H:6QE+ at HK"0DG<&%G94-A8VAE5&]%>'1E<FYA;$9I;&5S
M)R ]/B!&04Q312P)"2\O($EF('-E="P@<&%G92!C86-H92!E;G1R:65S('=I
M;&P at 8F4@<W1O<F5D(&EN('1Y<&\S=&5M<"]C86-H95]P86=E<R]A8B\@:6YS
M=&5A9"!O9B!T:&4 at 9&%T86)A<V4N(%-T:6QL+" B8V%C:&5?<&%G97,B('=I
M;&P at 8F4@9FEL;&5D(&EN(&1A=&%B87-E(&)U="!T:&4@(DA434PB(&9I96QD
M('=I;&P at 8F4@96UP='DN(%=H96X@=&AE(&-A8VAE(&ES(&9L=7-H960@=&AE
M(&9I;&5S(&EN(&-A8VAE7W!A9V5S+V%B+R!W:6QL(&YO="!B92!F;'5S:" M
M('EO=2!W:6QL(&AA=F4@=&\@9V%R8F%G92!C;&5A;B!M86YU86QL>2!O;F-E
M(&EN(&$@=VAI;&4N"BL)"2=P87-S=V]R9%1Y<&4G(#T^("=P;&%I;B<)"0D)
M+R\@4W1R:6YG(&9O<B!087-S=V]R9"!E;F-R>7!T:6]N+B!0;W-S:6)L92!V
M86QU97, at 87)E('!L86EN("AN;R!E;F-R>7!T:6]N*2!A;F0@;60U"B )*2P*
M( DG34]$4R<@/3X at 07)R87DH"0DO+R!"86-K96YD($UO9'5L92!#;VYF:6=U
M<F%T:6]N("AO8G-O;&5T92P@;6%K92!E>'1E;G-I;VX@:6YS=&5A9"D*( DI
M+ I);F1E>#H@='EP;S,O<WES97AT+V-M<R]T8FQ?8VUS+G!H< T*/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/0T*+2TM('1Y<&\S+W-Y<V5X="]C;7,O=&)L7V-M
M<RYP:' )*')E=FES:6]N(#(X.#(I#0HK*RL@='EP;S,O<WES97AT+V-M<R]T
M8FQ?8VUS+G!H< DH=V]R:VEN9R!C;W!Y*0T*0$ @+3(W."PY("LR-S at L,3(@
M0$ -"B I.PH@"B **PDO+R!C:&5C:R!F;W(@<&%S<W=O<F0 at 96YC<GEP=&EO
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:*BHJ*BHJ*@H at +R\@9F5?9W)O=7!S"B O+PH`
`
end