[CAUSEWAY-2995] [Task] Verify IsisModuleSecurityBypass does bypass Password Hash Generation

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 2.0.0-M7
• Fix Version/s: 2.0.0-M8
• Component/s: Core
• Assignee: Andi Huber
• Reporter: Jörg Rade
• Created: 08/Apr/22 06:58
• Updated: 14/Apr/22 05:15
• Resolved: 08/Apr/22 16:51

Description

Even when IsisModuleSecurityBypass.class is included in DemoAppWicketJpa, BCrypt action are logged to the console (using parameters: -Xms1G -Djava.security.egd=file:///dev/./urandom -Djava.security.debug="provider,engine=SecureRandom")

See: https://the-asf.slack.com/archives/CFC42LWBV/p1649400664122289?thread_ts=1648577147.703919&cid=CFC42LWBV