This issue has been created
 
 
OpenId Connect / cid:jira-generated-image-avatar-0791dde0-ae32-47a4-bfdb-066fedd8dd7a OIDC-280 Open

OIDC secret field is sent as a hashed value
 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-e8221a9f-d40d-4c8f-82e2-1d322eb5340b Sorin Chiuchiu created this issue on 06/Apr/26 12:31
 
Summary: OIDC secret field is sent as a hashed value
Issue Type: cid:jira-generated-image-avatar-0791dde0-ae32-47a4-bfdb-066fedd8dd7a Bug
Affects Versions: 2.20.2
Assignee: Unassigned
Components: Configuration
Created: 06/Apr/26 12:31
Priority: cid:jira-generated-image-static-major-66660f64-49a1-42f3-9d4b-7f170c8355da Major
Reporter: Sorin Chiuchiu
Description:

In more recent versions of XWiki password fields are by default hashed, which makes the oidc.secret field unreadable, causing errors at login.

 

I managed to reproduce the issue on XWiki 18.1.0 and the lts 17.10.5, while in older version of 16.10.8 it is stored by default as Clear.
 
 
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6) Atlassian logo
If image attachments aren't displayed, see this article.