CBSNexora/cbsnexora-backend
4
0
Fork 0
Code Issues Pull Requests Actions 46 Packages Projects Releases Wiki Activity

FINERACT-1724 Read only tenant password encryption migration

Browse Source 
- [x] ReadOnly tenant password encryption migration script
- [x] Documentation
- [x] Encryption password generator
This commit is contained in:
Janos Haber
2023-03-19 22:04:46 +01:00
committed by Arnold Gálovics
parent e41726edfd
commit 8418a23e4b
6 changed files with 168 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fineract-doc/src/docs/en/chapters/appendix/properties-database.adoc
+10
View File
@@ -49,6 +49,16 @@
|Default Demo Tenant
|TBD
|fineract.tenant.master-password
|FINERACT_DEFAULT_TENANTDB_MASTER_PASSWORD
|fineract
|TBD
|fineract.tenant.encrytion
|FINERACT_DEFAULT_TENANTDB_ENCRYPTION
|AES/CBC/PKCS5Padding
|TBD
|spring.liquibase.enabled
|FINERACT_LIQUIBASE_ENABLED
|true
fineract-doc/src/docs/en/chapters/architecture/persistence.adoc
+19
View File
@@ -31,6 +31,25 @@ The currently supported JDBC driver and corresponding mappings can be found belo
The actual code can be found in the `DatabaseTypeResolver` class.
== Tenant database security
The tenant database schema password is stored in the `tenant_server_connections` table in the tenant database.
The password and the read only schema password are encrypted using the `fineract.tenant.master-password` property.
By default, the database property will be encrypted in the first start from a plane text.
When you want to generate a new encrypted password, you can use the `org.apache.fineract.infrastructure.core.service.database.DatabasePasswordEncryptor` class.
=== Database password encryption usage
```
java -cp fineract-provider.jar -Dloader.main=org.apache.fineract.infrastructure.core.service.database.DatabasePasswordEncryptor org.springframework.boot.loader.PropertiesLauncher <masterPassword> <plainPassword>
```
For example:
```
java -cp fineract-provider-0.0.0-48f7e315.jar -Dloader.main=org.apache.fineract.infrastructure.core.service.database.DatabasePasswordEncryptor org.springframework.boot.loader.PropertiesLauncher fineract-master-password fineract-tenant-password
The encrypted password: VLwGl7vOP/q275ZTku+PNGWnGwW4mzzNHSNaO9Pr67WT5/NZMpBr9tGYYiYsqwL1eRew2jl7O3/N1EFbLlXhSA==
```
== Data-access layer
The data-access layer of Fineract is implemented by using JPA (Java Persistence API) with the EclipseLink provider.