How to create a user with a salt/hash?

[ashtonian]

How do I create/add a user with a salt/hash using this plugin?

[nnilsson123]

Did you ever figure this out?

[ashtonian]

nope

[ashtonian]

@HJianBo, @huangdan sorry to directly tag, any input? #223 #176 are the same issue.

[nnilsson123]

Checking the source code, things look pretty sensible. I'm no Erlang pro, but seems that with e.g. salt,sha256, one should be able to simply run sha256 on your string like <salt><password> and everything should work. But it just doesn't.

I believe my issues could be connected to the hexstring methods yielding a lower-case hexstring, and the PassHash and resulting hexstring comparison is case-sensitive.

[nnilsson123]

Can confirm that turning my hash to lower-case solved my issues, and everything now works great!

[ashtonian]

do you have example code ? Im using go but can I can port it

[nnilsson123]

Psuedocode: lowercase(sha256(concatenate(salt,password)))
This works with the salt,sha256 configuration (which can be configured using the EMQX_AUTH__PGSQL__PASSWORD_HASH environment variable, or equivalently in the corresponding config file).