changeset 7131:765febef9540 default tip

added well-known, insecure credentials
author Sebastien Jodogne <s.jodogne@gmail.com>
date Sun, 16 Aug 2026 00:50:32 +0200
parents 0743d0bd2a60
children
files OrthancServer/Sources/OrthancConfiguration.cpp
diffstat 1 files changed, 3 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/OrthancServer/Sources/OrthancConfiguration.cpp	Sat Aug 15 23:30:09 2026 +0200
+++ b/OrthancServer/Sources/OrthancConfiguration.cpp	Sun Aug 16 00:50:32 2026 +0200
@@ -916,8 +916,9 @@
           httpServer.RegisterUser(username.c_str(), password.c_str());
           hasUser = true;
 
-          if ((username == "orthanc" && password == "orthanc") ||
-              (username == "alice" && password == "orthanctest"))
+          if ((username == "orthanc" && password == "orthanc") ||    // Used in some Docker images
+              (username == "alice" && password == "orthanctest") ||  // Used in the integration tests
+              (username == "alice" && password == "alicePassword"))  // Suggestion in the Debian packages
           {
             LOG(WARNING) << "====> Your configuration contains a username/password pair with well-known credentials "
                          << "(check out username \"" << username << "\" in option \"" << REGISTERED_USERS