Authenticate users by checking ODK Database


(Guxiaowei) #1

Hi there,

I would like to authenticate my current ODK users from another mini web-app
by directly checking the ODK db.

How do I generate the digest hash that is saved on _registered_users table?
I'm not sure in what java files ODK generates the hashes,, whether it uses
some salt.

and i want to know where the code control user authentication in odk aggregate

Thanks,


(Guillermo) #2

Hi @guxiaowei!

You can start at CredentialsInfoBuilder.build(), which handles the change password dialog. It looks like Aggregate uses salted SHA1 hashes.