mirror of
1
Fork 0
forgejo/routers/web
zeripath c702e7995d
Provide the ability to set password hash algorithm parameters (#22942) (#22943)
Backport #22942

This PR refactors and improves the password hashing code within gitea
and makes it possible for server administrators to set the password
hashing parameters

In addition it takes the opportunity to adjust the settings for `pbkdf2`
in order to make the hashing a little stronger.

The majority of this work was inspired by PR #14751 and I would like to
thank @boppy for their work on this.

Thanks to @gusted for the suggestion to adjust the `pbkdf2` hashing
parameters.

Close #14751

---------

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-02-19 15:35:52 +08:00
..
admin Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2023-02-19 15:35:52 +08:00
auth Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2023-02-19 15:35:52 +08:00
dev Make better use of i18n (#20096) 2022-06-26 22:19:22 +08:00
events Improve Stopwatch behavior (#18930) 2022-04-25 22:45:22 +02:00
explore Fix sorting admin user list by last login (#22081) (#22107) 2022-12-13 16:37:33 -06:00
feed Fix setting HTTP headers after write (#21833) (#21877) 2022-11-22 09:00:42 +08:00
healthcheck Update go-chi/cache to utilize Ping() (#19719) 2022-05-15 20:43:27 +02:00
misc Fix panic in team repos API (#19431) 2022-04-20 18:43:26 +08:00
org Fix leaving organization bug on user settings -> orgs (#21983) (#22438) 2023-01-16 01:29:27 +02:00
repo fix incorrect role labels for migrated issues and comments (#22914) (#22923) 2023-02-16 11:19:46 +08:00
user Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2023-02-19 15:35:52 +08:00
auth.go Remove legacy `+build:` constraint (#19582) 2022-05-02 23:22:45 +08:00
auth_windows.go Let web and API routes have different auth methods group (#19168) 2022-03-28 12:46:28 +08:00
base.go Share HTML template renderers and create a watcher framework (#20218) 2022-08-28 10:43:25 +01:00
goget.go Refactor legacy `unknwon/com` package, improve golangci lint (#19284) 2022-04-01 16:47:50 +08:00
home.go Add sitemap support (#18407) 2022-06-25 19:06:01 +02:00
metrics.go Update HTTP status codes to modern codes (#18063) 2022-03-23 12:54:07 +08:00
nodeinfo.go Add nodeinfo endpoint for federation purposes (#16953) 2021-09-28 01:38:06 +02:00
swagger_json.go Refactor routers directory (#15800) 2021-06-09 01:33:54 +02:00
web.go Fix permission check on issue/pull lock (#22113) 2022-12-12 20:59:50 +01:00
webfinger.go Fix various typos (#20338) 2022-07-12 23:32:37 +02:00