Skip to content

security: support for setting passwords securely in the sql client #48543

@aaron-crl

Description

@aaron-crl

We should provide the ability to streamline the assignment of secure passwords with client-side hashing in the sql client.

As it stands today, CREATE USER 'foo' WITH PASSWORD 'bar'; and similar commands may result in logging of security primitives which may be surprising and also undesirable.

psql does this through the client-side \password command referenced here: https://www.postgresql.org/docs/12/auth-password.html

Additional conversations and workaround for psql for context

Jira issue: CRDB-6322

Metadata

Metadata

Assignees

Labels

A-authenticationPertains to authn subsystemsA-cc-enablementPertains to current CC production issues or short-term projectsA-cli-clientCLI commands that pertain to using SQL featuresA-securityC-enhancementSolution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)T-sql-foundationsSQL Foundations Team (formerly SQL Schema + SQL Sessions)

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions