use encrypted password by default

Author: cbaker6

.dockerignore

@@ -1,7 +1,15 @@
 node_modules
 coverage
 tmp
-disti
 heroku.yml
 docker-compose.yml
+npm-debug.log
+*.md
+LICENSE
+Dockerfile
+.dockerignore
+.gitignore
+.istanbul.yml
+.git
+.github
 

app.json

@@ -30,9 +30,13 @@
         "required": true
       },
       "PARSE_DASHBOARD_USER_PASSWORD": {
-        "description": "Specify the user password to connect with. This is a password in plain text.",
+        "description": "Specify the user password to connect with. This should be a hash of the password if PARSE_DASHBOARD_USER_PASSWORD_ENCRYPTED=true. Can use a hasher for generating, e.g. https://bcrypt-generator.com.",
         "required": true
       },
+      "PARSE_DASHBOARD_USER_PASSWORD_ENCRYPTED": {
+        "description": "Specify if the user parseword should be encrypted (true) or in plaintext (false).",
+        "value": "true"
+      },
       "PARSE_DASHBOARD_COOKIE_SESSION_SECRET": {
         "description": "The constant cookie session for dashboard.",
         "required": false

src/index.js

@@ -24,6 +24,7 @@ const configAppId = process.env.PARSE_DASHBOARD_APP_ID;
 const configAppName = process.env.PARSE_DASHBOARD_APP_NAME;
 const configUserId = process.env.PARSE_DASHBOARD_USER_ID;
 const configUserPassword = process.env.PARSE_DASHBOARD_USER_PASSWORD;
+const configUserPasswordEncrypted = process.env.PARSE_DASHBOARD_USER_PASSWORD_ENCRYPTED || true;
 
 if (!process.env.PARSE_DASHBOARD_CONFIG) {
   if (configServerURL && configPrimaryKey && configAppId) {
@@ -49,6 +50,7 @@ if (!process.env.PARSE_DASHBOARD_CONFIG) {
           pass: configUserPassword,
         }
       ];
+      configFromCLI.data.useEncryptedPasswords = configUserPasswordEncrypted;
     }
   } else if (!configServerURL && !configPrimaryKey && !configAppName) {
     configFile = path.join(__dirname, 'parse-dashboard-config.json');