szurubooru/server/szurubooru
ReAnzu 3f52aceca4 server/users: harden password hashes
- Changed password setup to use libsodium and argon2id (regular SHA256
  hashing for passwords is inadequate as modern GPU's can hash generate
  billions of hashes per second).
- Added code to auto migrate old passwords to the new password_hash if
  the existing password_hash matches either of the legacy password
  generation schemes (SHA1 or SHA256).
- Added migration to support new password_hash format length
- Added column password_revision. This field will default to 0, which
  all passwords will have till they're updated. After that each password
  hash method has a revision.
2018-03-08 23:40:47 +01:00
..
api server/posts: auto convert GIFs to WEBMs/MP4s 2018-03-08 07:48:45 +01:00
func server/users: harden password hashes 2018-03-08 23:40:47 +01:00
middleware server/users: fix checking passwords with colons 2018-02-10 14:04:02 +01:00
migrations server/users: harden password hashes 2018-03-08 23:40:47 +01:00
model server/users: harden password hashes 2018-03-08 23:40:47 +01:00
rest server: lint 2017-04-24 23:30:53 +02:00
search remove tags.json 2017-10-01 21:48:00 +02:00
tests server/users: harden password hashes 2018-03-08 23:40:47 +01:00
__init__.py split files into client/ and server/ 2016-04-01 18:48:16 +02:00
config.py server: refactor + add type hinting 2017-02-05 16:34:45 +01:00
db.py server: refactor + add type hinting 2017-02-05 16:34:45 +01:00
errors.py server: lint 2017-04-24 23:30:53 +02:00
facade.py server: refactor + add type hinting 2017-02-05 16:34:45 +01:00