[Koha-bugs] [Bug 27309] Add plugin hooks for capturing raw passwords (NNPDB)

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Tue Dec 29 12:03:33 CET 2020


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27309

--- Comment #1 from Magnus Enger <magnus at libriotech.no> ---
Created attachment 114719
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=114719&action=edit
Bug 27309 - Add plugin hooks for capturing passwords

This might sound like a stupid idea, but it is necessary in order
to implement support for the Norwegian National Patron Database
as a plugin in Koha. The plugin hook captures the borrowernumber
and raw password of a user and sends it to a plugin.

I created a tiny plugin to be able to test the functionality:
https://github.com/Libriotech/koha-plugin-capturepw
This plugin will capture borrowernumbers and raw passwords
when a user is added or updated. The borrowernumber and a
md5-hashed version of the password is stored in a tiny database
table (koha_plugin_no_libriotech_capturepw_capturepw) created by
the plugin.

To test:
- Enable plugins
- Install the CapturePW plugin
- Add and edit users in all possible ways, including
-- Setting a password for a new user
-- Changing a password in the staff client
-- Changing a password in the OPAC
-- Creating a disabled user account

Check the database table for updates after each operation. If a new
line is added to the database for each operation, and the md5 hash
changes when a password is changed, everything should be ok.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.


More information about the Koha-bugs mailing list