From 0abb46a1a85a7cd44ad92edb360a013d74ba0393 Mon Sep 17 00:00:00 2001 From: Pramit Kumar Dutta Date: Mon, 29 Jan 2024 16:59:31 +0530 Subject: [PATCH 1/3] CodeQl issue fixed: Use of password hash with insufficient computational effort --- .../reset-user-password/reset-user-password.component.html | 4 ++-- src/app/reset-user-password/reset-user-password.component.ts | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/app/reset-user-password/reset-user-password.component.html b/src/app/reset-user-password/reset-user-password.component.html index 49a40fe6..ef3bed93 100644 --- a/src/app/reset-user-password/reset-user-password.component.html +++ b/src/app/reset-user-password/reset-user-password.component.html @@ -40,7 +40,7 @@

Reset User Password

- Password is required @@ -49,6 +49,6 @@

Reset User Password

- +
\ No newline at end of file diff --git a/src/app/reset-user-password/reset-user-password.component.ts b/src/app/reset-user-password/reset-user-password.component.ts index 70b44509..e2717592 100644 --- a/src/app/reset-user-password/reset-user-password.component.ts +++ b/src/app/reset-user-password/reset-user-password.component.ts @@ -36,7 +36,7 @@ export class ResetUserPasswordComponent implements OnInit { /*NgModel*/ serviceProviderID: any; user: any; - password: any; + code: any; /*Arrays*/ userNamesList: any = []; @@ -155,7 +155,7 @@ export class ResetUserPasswordComponent implements OnInit { this.alertService.alert(response.response); this.tableMode = false; this.user = null; - this.password = null; + this.code = null; this.userDetails = null; }, err => { console.log('Error', err); From 64c50bc5b2972080963ecc41abbea64532f35a00 Mon Sep 17 00:00:00 2001 From: Pramit Kumar Dutta Date: Mon, 29 Jan 2024 17:12:46 +0530 Subject: [PATCH 2/3] test --- src/app/reset-user-password/reset-user-password.component.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app/reset-user-password/reset-user-password.component.ts b/src/app/reset-user-password/reset-user-password.component.ts index e2717592..9d4e6c41 100644 --- a/src/app/reset-user-password/reset-user-password.component.ts +++ b/src/app/reset-user-password/reset-user-password.component.ts @@ -147,7 +147,7 @@ export class ResetUserPasswordComponent implements OnInit { "password": this.encrypt(this.Key_IV, password), // "password": password, // this.encryptPassword = this.encrypt(this.Key_IV, password) - //"statusID": 1 + //"statusID": 1 } console.log("resetObj", resetObj); this.resetUserPasswordService.resetUserPassword(resetObj) From 51db5a9857022174721f568f6b2037a469ce0f5a Mon Sep 17 00:00:00 2001 From: Pramit Kumar Dutta Date: Mon, 29 Jan 2024 17:32:44 +0530 Subject: [PATCH 3/3] CodeQl issue fixed: Use of password hash with insufficient computational effort --- src/app/login/login.component.ts | 6 +++--- src/app/login/login.html | 4 ++-- .../reset-user-password/reset-user-password.component.html | 2 +- .../reset-user-password/reset-user-password.component.ts | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/src/app/login/login.component.ts b/src/app/login/login.component.ts index 591ddd9b..a816bef3 100644 --- a/src/app/login/login.component.ts +++ b/src/app/login/login.component.ts @@ -38,7 +38,7 @@ import * as CryptoJS from 'crypto-js'; export class loginContentClass implements OnInit { model: any = {}; userID: any; - password: any; + code: any; serviceProviderID: any; status: any; dynamictype: any = 'password'; @@ -139,8 +139,8 @@ export class loginContentClass implements OnInit { return salt + iv + ciphertext; } - login(userId: any, password: any, doLogout) { - this.encryptPassword = this.encrypt(this.Key_IV, password) + login(userId: any, tempCode: any, doLogout) { + this.encryptPassword = this.encrypt(this.Key_IV, tempCode) if (userId.toLowerCase() === 'SUPERADMIN'.toLowerCase()) { // this.loginservice.superAdminAuthenticate(userId, password, doLogout) diff --git a/src/app/login/login.html b/src/app/login/login.html index d25ad15a..170dc6e2 100644 --- a/src/app/login/login.html +++ b/src/app/login/login.html @@ -61,7 +61,7 @@
Logo
-
@@ -80,7 +80,7 @@
- + diff --git a/src/app/reset-user-password/reset-user-password.component.html b/src/app/reset-user-password/reset-user-password.component.html index ef3bed93..34f27a59 100644 --- a/src/app/reset-user-password/reset-user-password.component.html +++ b/src/app/reset-user-password/reset-user-password.component.html @@ -40,7 +40,7 @@

Reset User Password

- Password is required diff --git a/src/app/reset-user-password/reset-user-password.component.ts b/src/app/reset-user-password/reset-user-password.component.ts index 9d4e6c41..68cb029b 100644 --- a/src/app/reset-user-password/reset-user-password.component.ts +++ b/src/app/reset-user-password/reset-user-password.component.ts @@ -141,10 +141,10 @@ export class ResetUserPasswordComponent implements OnInit { /*Reset Password*/ - resetPassword(userName, password) { + resetPassword(userName, code) { let resetObj = { "userName": userName, - "password": this.encrypt(this.Key_IV, password), + "password": this.encrypt(this.Key_IV, code), // "password": password, // this.encryptPassword = this.encrypt(this.Key_IV, password) //"statusID": 1