[FINERACT-1831] Tenant passwd encryption

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.9.0
• Labels: PepperSoup
• Assignee: Mihaly Dallos
• Reporter: Mihaly Dallos
• Created: 09/Dec/22 08:36
• Updated: 07/Jan/24 10:51
• Resolved: 28/Jul/23 13:53

Description

As a Fineract operator
I want to store tenant passwords encrypted
in order to reduce security risk

Background and details:

Tenant passwords are stored in plain text in the database. It should be encrypted to disable accidental share/access.…

Acceptance criteria

1. Tenant passwords are encrypted in the fineract_tenants schema
2. Tenant passwords are encrypted with AES encryption using Java (not the DB level encryption)
3. The AES mode is CBC (AES/CBC/PKCS5Padding)
4. Existing tenants are migrated over to encrypted passwords seamlessly
5. The master password and initialization vector (IV) for encrypting the data can be configured via environment variables
6. The encryption for tenant passwords cannot be turned off

Issue Links

• is a child of: FINERACT-1874 Release Apache Fineract 1.9.0
• links to: GitHub Pull Request #3011