billy1380/blogwt

Changing salt properties does nothing

billy1380 opened this issue · 1 comments

This has not been mapped yet but will be as simple as getting the salt property if one is defined in the UserService class.

If salt property value has been changed all users will be locked out and have to enter new passwords for their accounts.

Additionally the salt is never passed to the client like other properties to avoid it being discovered by users.