Skip to content

feat: encrypt login password with SM2 before submit - #364

Open
LordofAvernus wants to merge 1 commit into
actiontech:release-2.2306.xfrom
LordofAvernus:sqle-ui/feat-login-sm2-3043
Open

feat: encrypt login password with SM2 before submit#364
LordofAvernus wants to merge 1 commit into
actiontech:release-2.2306.xfrom
LordofAvernus:sqle-ui/feat-login-sm2-3043

Conversation

@LordofAvernus

@LordofAvernus LordofAvernus commented Jul 28, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Fetch GET /v1/login/encryption before login
  • When enabled, encrypt password with SM2 (C1C3C2) and submit encrypted_password + key_id
  • Do not fall back to plaintext when encryption is enabled

Test plan

  • Jest: Login page plaintext path when enable=false
  • Jest: encrypted payload has no plaintext password when enabled
  • Jest: encrypt failure does not call login API
  • yarn ts-check
  • Backend standalone modes verified with sm-crypto ciphertext

Fixes actiontech/sqle-ee#3043

Fetch login public key and send SM2 ciphertext instead of plaintext
password when server encryption is enabled.

Fixes actiontech/sqle-ee#3043
@CLAassistant

CLAassistant commented Jul 28, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants