[Catalyst] Supporting multiple password types with C::P::Auth::Store::DBIC

Marc Espie espie at nerim.net
Wed Dec 13 10:24:55 GMT 2006


On Wed, Dec 13, 2006 at 12:16:30AM +0100, Daniel McBrearty wrote:
> Am migrating from an old system which used Basic Auth, to this plugin.
> As mentioned in a previous post, using
> 
> password_type => crypted
> 
> means that the old passwords still work. Nice ...
> 
> But reading the docs for "crypt" I just noticed that it can screw up
> on unicode wide chars, so it looks like a good idea to migrate away
> from crypt to hashed. The best way to do this would be to make the
> plugin support both ... something like :

I really don't think it's a good idea to allow non-ascii characters
into passwords.

People will screw themselves over: choose a password with an é, change
machines, and realize you don't know how to enter an é from the new
setup.



More information about the Catalyst mailing list