{"action":"created","issue":{"url":"https://api.github.com/repos/silverstripe/cwp/issues/199","repository_url":"https://api.github.com/repos/silverstripe/cwp","labels_url":"https://api.github.com/repos/silverstripe/cwp/issues/199/labels{/name}","comments_url":"https://api.github.com/repos/silverstripe/cwp/issues/199/comments","events_url":"https://api.github.com/repos/silverstripe/cwp/issues/199/events","html_url":"https://github.com/silverstripe/cwp/issues/199","id":446836863,"node_id":"MDU6SXNzdWU0NDY4MzY4NjM=","number":199,"title":"Extend/Subclass MFA to provide NZISM compliant hashing","user":{"login":"ScopeyNZ","id":3260989,"node_id":"MDQ6VXNlcjMyNjA5ODk=","avatar_url":"https://avatars2.githubusercontent.com/u/3260989?v=4","gravatar_id":"","url":"https://api.github.com/users/ScopeyNZ","html_url":"https://github.com/ScopeyNZ","followers_url":"https://api.github.com/users/ScopeyNZ/followers","following_url":"https://api.github.com/users/ScopeyNZ/following{/other_user}","gists_url":"https://api.github.com/users/ScopeyNZ/gists{/gist_id}","starred_url":"https://api.github.com/users/ScopeyNZ/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ScopeyNZ/subscriptions","organizations_url":"https://api.github.com/users/ScopeyNZ/orgs","repos_url":"https://api.github.com/users/ScopeyNZ/repos","events_url":"https://api.github.com/users/ScopeyNZ/events{/privacy}","received_events_url":"https://api.github.com/users/ScopeyNZ/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-05-21T21:37:01Z","updated_at":"2019-05-21T21:49:22Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"### Description\r\n\r\nBy default MFA hashes backup codes with `password_hash` which will use either bcrypt or argon2i/d for hashing. NZISM specifies that password hashes should be computed with the key derivation function pbkdf2. This is actually (very slightly) worse than what's provided by MFA out of the box.\r\n\r\n### Acceptance Criteria\r\n\r\n- Backup codes generated by the MFA module in CWP are hashed with an NZISM compliant hashing algo (pbkdf2 at time of writing) using unique salts per code."},"comment":{"url":"https://api.github.com/repos/silverstripe/cwp/issues/comments/494572000","html_url":"https://github.com/silverstripe/cwp/issues/199#issuecomment-494572000","issue_url":"https://api.github.com/repos/silverstripe/cwp/issues/199","id":494572000,"node_id":"MDEyOklzc3VlQ29tbWVudDQ5NDU3MjAwMA==","user":{"login":"robbieaverill","id":5170590,"node_id":"MDQ6VXNlcjUxNzA1OTA=","avatar_url":"https://avatars1.githubusercontent.com/u/5170590?v=4","gravatar_id":"","url":"https://api.github.com/users/robbieaverill","html_url":"https://github.com/robbieaverill","followers_url":"https://api.github.com/users/robbieaverill/followers","following_url":"https://api.github.com/users/robbieaverill/following{/other_user}","gists_url":"https://api.github.com/users/robbieaverill/gists{/gist_id}","starred_url":"https://api.github.com/users/robbieaverill/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robbieaverill/subscriptions","organizations_url":"https://api.github.com/users/robbieaverill/orgs","repos_url":"https://api.github.com/users/robbieaverill/repos","events_url":"https://api.github.com/users/robbieaverill/events{/privacy}","received_events_url":"https://api.github.com/users/robbieaverill/received_events","type":"User","site_admin":false},"created_at":"2019-05-21T21:49:22Z","updated_at":"2019-05-21T21:49:22Z","author_association":"MEMBER","body":"Just noting that I think this change should be made in cwp-core, not in cwp"}}
{"actor":{"display_login":"robbieaverill"}}