OpenXPKI::Server::Authentication::Password

Passphrase based authentication against a given user database. The users must be provided as a key/value list where the key is equal to the username that is passed to the handler. The value depends on the chosen mode of operation:

static role, no user information

mode must be digest (default) and role must be set. The value must be a scalar that represents the hashed password in a format that is understod by "OpenXPKI::Password::check". If the password matches, the user is logged in with the given static role. userinfo remains empty.

static role, with user information

mode must be hash (default) and role must be set. The user source must at least return a hash with the key digest holding the password. The user is logged in with the given role, tenant is set if present, all other keys, except for role which is deleted unused, are returned as userinfo.

dynamic role with optional information

role must be empty, same as above but the role is read from the key role from the result. If the result does not have a non-empty value the login fails.