SRS-087 Use hashed and salted passwords
Identifier
SRS-087
Software System
- Authentication Service
Category
- Security
Description
Because the software must authenticate users and securely manage their credentials (both at rest and in transit), it falls squarely under the need to protect and periodically refresh authenticators. Specifically, the REST API uses username and password credentials to generate tokens that must remain confidential, be changeable from default values, and be securely stored.
Derived from PRS
PRS-9F2: Cybersecurity & continuous threat detection