[COUCHDB-2068] Allow server to disable authentication schemes

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Fix Version/s: 1.7.0
• Assignee: Unassigned
• Reporter: Robert Newson
• Created: 16/Feb/14 16:09
• Updated: 02/Sep/18 06:53
• Resolved: 02/Sep/18 06:53

Description

_users documents might have credentials protected with earlier schemes (password_sha). Allow a CouchDB server to refuse to authenticate users using older schemes.

For bonus points, allow further config options to insist on a work factor threshold for schemes that support them (pbkdf2).