They are not (usually) directly. Catalyst is pretty agnostic about its pieces. They are (probably) stored in a layer that is plugged into Catalyst and there are many ways it can be done; some encrypted, some not, some from plugins, some from scratch or even inlined or with an arbitrary authentication, some from external authentication like LDAP or OAuth. A common/standard way is to use DBIx::Class with session authentication; Catalyst::Manual::Tutorial::Authentication.
I think you’ll need to understand both sides of the pipe you’re working on pretty thoroughly to succeed on a migration like this.
|