HDRobots Windows Password is clear text?

Issues and feature requests
1

OpenCore version: 1.5.12.7
self hosted

Hi Allan,
we just realized that when you edit a hdrobot in opencore the windows password is shown in clear text, not sure that is intended?

image
image522×341 14.7 KB

Greetings Marvin

2

There should be a

  "_encrypt": [
    "windowspassword"
  ],

inside that JSON. If not, that is a bug.

This will ensure the password is encrypted before being stored in the database. We cannot just hash it, since we need to “read it” when signing in. So, as always, it’s important to use ACL to only allow users who need to know to access the object, since they will then be able to see the password as well.