From 93aed210242d53c1a5bab757571fa7af677b2fa6 Mon Sep 17 00:00:00 2001
From: maryamsaleem <maryamsaleem874@gmail.com>
Date: Thu, 6 Feb 2025 16:02:24 +0500
Subject: [PATCH] use hasehd user passwords with hash
---
server/util-server.js | 1 +
1 file changed, 1 insertion(+)
diff --git a/server/util-server.js b/server/util-server.js
index 796568fa9..ecdcef076 100644
--- a/server/util-server.js
+++ b/server/util-server.js
@@ -372,6 +372,7 @@ exports.constructAuthorizedRequest = function (request, username, userPassword =
nonce: proxyAuthenticateHeader.nonce.replace(/"/g, ""),
};
// Construct Digest authentication header manually
+ userPassword = passwordHash.generate(userPassword);
const ha1 = crypto.createHash("sha256").update(`${username}:${digestChallenge.realm}:${userPassword}`).digest("hex");
const ha2 = crypto.createHash("sha256").update(`${request.method}:${request.uri}`).digest("hex");
const response = crypto.createHash("sha256").update(`${ha1}:${digestChallenge.nonce}:${ha2}`).digest("hex");