mirrors
/
forgejo
mirror of
1
Fork 0
Code Issues Releases Activity
forgejo/models
History
Gusted 623c93ff46
Increase Salt randomness (#18179) 
- The current implementation of `RandomString` doesn't give you a most-possible unique randomness. It gives you 6*`length` instead of the possible 8*`length` bits(or as `length`x bytes) randomness. This is because `RandomString` is being limited to a max value of 63, this in order to represent the random byte as a letter/digit.
- The recommendation of pbkdf2 is to use 64+ bit salt, which the `RandomString` doesn't give with a length of 10, instead of increasing 10 to a higher number, this patch adds a new function called `RandomBytes` which does give you the guarentee of 8*`length` randomness and thus corresponding of `length`x bytes randomness.
- Use hexadecimal to store the bytes value in the database, as mentioned, it doesn't play nice in order to convert it to a string. This will always be a length of 32(with `length` being 16).
- When we detect on `Authenticate`(source: db) that a user has the old format of salt, re-hash the password such that the user will have it's password hashed with increased salt.

Thanks to @zeripath for working out the rouge edges from my first commit 😄.

Co-authored-by: lafriks <lauris@nix.lv>
Co-authored-by: zeripath <art27@cantab.net>
 		2022-01-04 15:13:52 +00:00
..
admin Move user/org deletion to services (#17673) 2021-11-19 01:42:27 +08:00
appstate Sync gitea app path for git hooks and authorized keys when starting (#17335) 2021-10-21 17:22:43 +08:00
asymkey Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
auth Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
avatars Make AvatarRenderedSizeFactor configurable and set it to 3 (#17951) 2021-12-16 10:18:38 +08:00
db Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
fixtures tests: add coverage for models migration helpers (#18162) 2022-01-03 23:35:01 +08:00
issues Simplify parameter types (#18006) 2021-12-20 04:41:31 +00:00
migrations Increase Salt randomness (#18179) 2022-01-04 15:13:52 +00:00
perm Move accessmode into models/perm (#17828) 2021-11-28 12:58:28 +01:00
repo Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
unit Move unit into models/unit/ (#17576) 2021-11-09 20:57:58 +01:00
unittest tests: s/GITEA_UNIT_TESTS_VERBOSE/GITEA_UNIT_TESTS_LOG_SQL/ (#18142) 2022-01-01 04:31:24 +01:00
user Increase Salt randomness (#18179) 2022-01-04 15:13:52 +00:00
webhook Remove NewSession method from db.Engine interface (#17577) 2021-11-21 23:41:00 +08:00
access.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
access_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
action.go Prevent hang in git cat-file if repository is not a valid repository and other fixes (#17991) 2021-12-16 19:01:14 +00:00
action_list.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
action_test.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
branches.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
branches_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
commit.go Move keys to models/asymkey (#17917) 2021-12-10 16:14:24 +08:00
commit_status.go Add missing `X-Total-Count` and fix some related bugs (#17968) 2021-12-15 13:39:34 +08:00
commit_status_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
consistency.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
consistency_test.go A better go code formatter, and now `make fmt` can run in Windows (#17684) 2021-11-17 20:34:35 +08:00
engine_test.go Refactor install page (db type) (#17919) 2021-12-07 13:44:08 +08:00
error.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
fixture_generation.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
fixture_test.go Decouple unit test code from business code (#17623) 2021-11-12 22:36:47 +08:00
helper.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
helper_directory.go refactor: move from io/ioutil to io and os package (#17109) 2021-09-22 13:38:34 +08:00
helper_environment.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue.go Use conditions but not repo ids as query condition (#16839) 2021-12-29 21:02:12 +08:00
issue_assignees.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_assignees_test.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
issue_comment.go Add API to get issue/pull comments and events (timeline) (#17403) 2022-01-01 22:12:25 +08:00
issue_comment_list.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_comment_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_dependency.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_dependency_test.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
issue_label.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_label_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_list.go Use conditions but not repo ids as query condition (#16839) 2021-12-29 21:02:12 +08:00
issue_list_test.go Decouple unit test, remove intermediate `unittestbridge` package (#17662) 2021-11-16 16:53:21 +08:00
issue_lock.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
issue_milestone.go Simplify parameter types (#18006) 2021-12-20 04:41:31 +00:00
issue_milestone_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_reaction.go Add missing `X-Total-Count` and fix some related bugs (#17968) 2021-12-15 13:39:34 +08:00
issue_reaction_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_stopwatch.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_stopwatch_test.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
issue_test.go Use conditions but not repo ids as query condition (#16839) 2021-12-29 21:02:12 +08:00
issue_tracked_time.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_tracked_time_test.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
issue_user.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_user_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_watch.go Add missing `X-Total-Count` and fix some related bugs (#17968) 2021-12-15 13:39:34 +08:00
issue_watch_test.go A better go code formatter, and now `make fmt` can run in Windows (#17684) 2021-11-17 20:34:35 +08:00
issue_xref.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
issue_xref_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
lfs.go Allow admin to associate missing LFS objects for repositories (#18143) 2022-01-01 17:05:31 +08:00
lfs_lock.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
main_test.go Move keys to models/asymkey (#17917) 2021-12-10 16:14:24 +08:00
migrate.go tests: add coverage for models migration helpers (#18162) 2022-01-03 23:35:01 +08:00
migrate_test.go tests: add coverage for models migration helpers (#18162) 2022-01-03 23:35:01 +08:00
notification.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
notification_test.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
org.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
org_team.go Prevent hang in git cat-file if repository is not a valid repository and other fixes (#17991) 2021-12-16 19:01:14 +00:00
org_team_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
org_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
project.go Remove NewSession method from db.Engine interface (#17577) 2021-11-21 23:41:00 +08:00
project_board.go Support sorting for project board issuses (#17152) 2021-12-08 14:57:18 +08:00
project_issue.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
project_test.go Decouple unit test code from business code (#17623) 2021-11-12 22:36:47 +08:00
protected_tag.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
protected_tag_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
pull.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
pull_list.go Don't delete branch if other PRs with this branch are open (#18164) 2022-01-03 20:45:58 +01:00
pull_test.go Don't delete branch if other PRs with this branch are open (#18164) 2022-01-03 20:45:58 +01:00
release.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
repo.go Fix performance regression when user has many organization (#18125) 2021-12-30 13:03:40 +08:00
repo_activity.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
repo_collaboration.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
repo_collaboration_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
repo_generate.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
repo_generate_test.go Fixed assert statements. (#16089) 2021-06-07 07:27:09 +02:00
repo_list.go Use conditions but not repo ids as query condition (#16839) 2021-12-29 21:02:12 +08:00
repo_list_test.go Decouple unit test, remove intermediate `unittestbridge` package (#17662) 2021-11-16 16:53:21 +08:00
repo_permission.go Use conditions but not repo ids as query condition (#16839) 2021-12-29 21:02:12 +08:00
repo_permission_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
repo_test.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
repo_transfer.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
repo_transfer_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
review.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
review_test.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
statistic.go Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
task.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
token.go Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
token_test.go A better go code formatter, and now `make fmt` can run in Windows (#17684) 2021-11-17 20:34:35 +08:00
upload.go Remove NewSession method from db.Engine interface (#17577) 2021-11-21 23:41:00 +08:00
user.go Use conditions but not repo ids as query condition (#16839) 2021-12-29 21:02:12 +08:00
user_heatmap.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
user_heatmap_test.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
user_test.go Use conditions but not repo ids as query condition (#16839) 2021-12-29 21:02:12 +08:00
userlist.go Move more model into models/user (#17826) 2021-11-28 22:11:58 +08:00
userlist_test.go Move more model into models/user (#17826) 2021-11-28 22:11:58 +08:00