[Catalyst] Supporting multiple password types with C::P::Auth::Store::DBIC

Daniel McBrearty danielmcbrearty at gmail.com
Wed Dec 13 10:45:29 GMT 2006


the site is available in about 15 languages, including Chinese,
Japanese, Greek ... it doesn't make any sense to restrict to
[A-Z][a-z]. Some users may be hardly using those.

If people lock themeselves out, they can get a reminder emailed (which
will use those characters).


On 12/13/06, Marc Espie <espie at nerim.net> wrote:
> On Wed, Dec 13, 2006 at 12:16:30AM +0100, Daniel McBrearty wrote:
> > Am migrating from an old system which used Basic Auth, to this plugin.
> > As mentioned in a previous post, using
> >
> > password_type => crypted
> >
> > means that the old passwords still work. Nice ...
> >
> > But reading the docs for "crypt" I just noticed that it can screw up
> > on unicode wide chars, so it looks like a good idea to migrate away
> > from crypt to hashed. The best way to do this would be to make the
> > plugin support both ... something like :
>
> I really don't think it's a good idea to allow non-ascii characters
> into passwords.
>
> People will screw themselves over: choose a password with an é, change
> machines, and realize you don't know how to enter an é from the new
> setup.
>
> _______________________________________________
> List: Catalyst at lists.rawmode.org
> Listinfo: http://lists.rawmode.org/mailman/listinfo/catalyst
> Searchable archive: http://www.mail-archive.com/catalyst@lists.rawmode.org/
> Dev site: http://dev.catalyst.perl.org/
>


-- 
Daniel McBrearty
email : danielmcbrearty at gmail.com
www.engoi.com : the multi - language vocab trainer
BTW : 0873928131



More information about the Catalyst mailing list