-
Notifications
You must be signed in to change notification settings - Fork 4.1k
security: support for setting passwords securely in the sql client #48543
Copy link
Copy link
Closed
Labels
A-authenticationPertains to authn subsystemsPertains to authn subsystemsA-cc-enablementPertains to current CC production issues or short-term projectsPertains to current CC production issues or short-term projectsA-cli-clientCLI commands that pertain to using SQL featuresCLI commands that pertain to using SQL featuresA-securityC-enhancementSolution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)T-sql-foundationsSQL Foundations Team (formerly SQL Schema + SQL Sessions)SQL Foundations Team (formerly SQL Schema + SQL Sessions)
Metadata
Metadata
Assignees
Labels
A-authenticationPertains to authn subsystemsPertains to authn subsystemsA-cc-enablementPertains to current CC production issues or short-term projectsPertains to current CC production issues or short-term projectsA-cli-clientCLI commands that pertain to using SQL featuresCLI commands that pertain to using SQL featuresA-securityC-enhancementSolution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)T-sql-foundationsSQL Foundations Team (formerly SQL Schema + SQL Sessions)SQL Foundations Team (formerly SQL Schema + SQL Sessions)
We should provide the ability to streamline the assignment of secure passwords with client-side hashing in the sql client.
As it stands today,
CREATE USER 'foo' WITH PASSWORD 'bar';and similar commands may result in logging of security primitives which may be surprising and also undesirable.psql does this through the client-side
\passwordcommand referenced here: https://www.postgresql.org/docs/12/auth-password.htmlAdditional conversations and workaround for psql for context
Jira issue: CRDB-6322