Password Obfuscator
Here, we will show you how to enable the option to specify the password obfuscator for the password parameter of the login API.
Configuration
On the organization edit page, you can find the Password obfuscator configuration option. You can select the encryption algorithm from the dropdown list.
- Plain: The password parameter of the login API will be transmitted directly in plain text.
- AES: The password parameter of the login API will first be encrypted using the AES algorithm and then transmitted in ciphertext form.
- DES: The password parameter of the login API will first be encrypted using the DES algorithm and then transmitted in ciphertext form.
Each time you update the encryption algorithm other than Plain, Casdoor will randomly generate an encryption key for you and populate it into the Password obf key configuration option. If you want to specify the encryption key for the encryption algorithm, you can modify the key in Password obf key configuration option:
If your key does not meet the encryption algorithm requirements, Casdoor will prompt you with the regular expression that the key should meet in the error message.
Here is a demo video that shows how to use password obfuscator: