Pita/etherpad-lite — pull request #243 by jaseg (2011-11-27 01:27:34+00:00)
Title: Fix proposal for not storing passwords in plain-text by timed tokens

This code is not yet complete or tested. There still is some work to be done, e.g. I still did not decide for one particular client-side sha512 implementation.
The authentication is handled by a one-time token which is generated by the client on authentication with a password and which is limited in its validity to two weeks. Thus an attacker does only get a two-week access thanks to this method.

I will fix the above mentioned issues and test the code as soon as I get my local etherpad instance running.