You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
gitea/models/user
zeripath c702e7995d
Provide the ability to set password hash algorithm parameters (#22942) (#22943)
Backport #22942

This PR refactors and improves the password hashing code within gitea
and makes it possible for server administrators to set the password
hashing parameters

In addition it takes the opportunity to adjust the settings for `pbkdf2`
in order to make the hashing a little stronger.

The majority of this work was inspired by PR #14751 and I would like to
thank @boppy for their work on this.

Thanks to @gusted for the suggestion to adjust the `pbkdf2` hashing
parameters.

Close #14751

---------

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2 years ago
..
avatar.go Fix get system setting bug when enabled redis cache (#22298) 2 years ago
badge.go Add badge capabilities to users (#20607) 3 years ago
email_address.go Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2 years ago
email_address_test.go Make e-mail sanity check more precise (#20991) 2 years ago
error.go Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2 years ago
external_login_user.go Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2 years ago
follow.go Use neutral language in comments and docs (#20135) 3 years ago
follow_test.go Move tests as seperate sub packages to reduce duplicated file names (#19951) 3 years ago
list.go Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2 years ago
main_test.go Move tests as seperate sub packages to reduce duplicated file names (#19951) 3 years ago
must_change_password.go Add command to bulk set must-change-password (#22823) (#22928) 2 years ago
openid.go Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2 years ago
openid_test.go Move tests as seperate sub packages to reduce duplicated file names (#19951) 3 years ago
redirect.go Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2 years ago
redirect_test.go Move tests as seperate sub packages to reduce duplicated file names (#19951) 3 years ago
search.go Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2 years ago
setting.go Fix get system setting bug when enabled redis cache (#22298) 2 years ago
setting_keys.go User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133) 3 years ago
setting_test.go Fix dashboard ignored system setting cache (#21621) (#21759) 2 years ago
user.go Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2 years ago
user_test.go Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2 years ago
user_update.go Move some files into models' sub packages (#20262) 3 years ago