From 10541932981da59b5e8c7242b1f624c9b068ba79 Mon Sep 17 00:00:00 2001 From: Nick O'Leary Date: Sun, 13 Dec 2015 21:27:57 +0000 Subject: [PATCH] Update example httpNodeAuth setting to be bcrypt --- settings.js | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/settings.js b/settings.js index 5d77c9e64..552ae9595 100644 --- a/settings.js +++ b/settings.js @@ -93,9 +93,10 @@ module.exports = { // To password protect the node-defined HTTP endpoints (httpNodeRoot), or // the static content (httpStatic), the following properties can be used. - // The password must be an md5 hash eg.. 5f4dcc3b5aa765d61d8327deb882cf99 ('password') - //httpNodeAuth: {user:"user",pass:"5f4dcc3b5aa765d61d8327deb882cf99"}, - //httpStaticAuth: {user:"user",pass:"5f4dcc3b5aa765d61d8327deb882cf99"}, + // The pass field is a bcrypt hash of the password. + // See http://nodered.org/docs/security.html#generating-the-password-hash + //httpNodeAuth: {user:"user",pass:"$2a$08$zZWtXTja0fB1pzD4sHCMyOCMYz2Z6dNbM6tl8sJogENOMcxWV9DN."}, + //httpStaticAuth: {user:"user",pass:"$2a$08$zZWtXTja0fB1pzD4sHCMyOCMYz2Z6dNbM6tl8sJogENOMcxWV9DN."}, // The following property can be used to enable HTTPS // See http://nodejs.org/api/https.html#https_https_createserver_options_requestlistener