This repository has been archived on 2024-01-04. You can view files and clone it, but cannot push or open issues or pull requests.

Gusted 623c93ff46 Increase Salt randomness (#18179) ... - The current implementation of `RandomString` doesn't give you a most-possible unique randomness. It gives you 6*`length` instead of the possible 8*`length` bits(or as `length`x bytes) randomness. This is because `RandomString` is being limited to a max value of 63, this in order to represent the random byte as a letter/digit. - The recommendation of pbkdf2 is to use 64+ bit salt, which the `RandomString` doesn't give with a length of 10, instead of increasing 10 to a higher number, this patch adds a new function called `RandomBytes` which does give you the guarentee of 8*`length` randomness and thus corresponding of `length`x bytes randomness. - Use hexadecimal to store the bytes value in the database, as mentioned, it doesn't play nice in order to convert it to a string. This will always be a length of 32(with `length` being 16). - When we detect on `Authenticate`(source: db) that a user has the old format of salt, re-hash the password such that the user will have it's password hashed with increased salt. Thanks to @zeripath for working out the rouge edges from my first commit 😄. Co-authored-by: lafriks <lauris@nix.lv> Co-authored-by: zeripath <art27@cantab.net>		2022-01-04 15:13:52 +00:00
..
fixtures	Refactor: Move login out of models (#16199)	2021-07-24 11:16:34 +01:00
migrations.go	Increase Salt randomness (#18179)	2022-01-04 15:13:52 +00:00
migrations_test.go	Prevent hang in git cat-file if repository is not a valid repository and other fixes (#17991)	2021-12-16 19:01:14 +00:00
testlogger_test.go	Add an abstract json layout to make it's easier to change json library (#16528)	2021-07-24 18:03:58 +02:00
v70.go
v71.go	Use single shared random string generation function (#15741)	2021-05-10 07:45:17 +01:00
v72.go
v73.go
v74.go
v75.go
v76.go
v77.go
v78.go
v79.go
v80.go
v81.go
v82.go
v83.go
v84.go
v85.go	Use single shared random string generation function (#15741)	2021-05-10 07:45:17 +01:00
v86.go
v87.go
v88.go
v89.go
v90.go
v91.go
v92.go
v93.go
v94.go
v95.go
v96.go
v97.go
v98.go
v99.go
v100.go
v101.go
v102.go
v103.go
v104.go
v105.go
v106.go
v107.go
v108.go
v109.go
v110.go
v111.go	Move unit into models/unit/ (#17576)	2021-11-09 20:57:58 +01:00
v112.go
v113.go
v114.go
v115.go	refactor: move from io/ioutil to io and os package (#17109)	2021-09-22 13:38:34 +08:00
v116.go
v117.go
v118.go
v119.go
v120.go
v121.go
v122.go
v123.go
v124.go
v125.go
v126.go
v127.go
v128.go
v129.go
v130.go	Add an abstract json layout to make it's easier to change json library (#16528)	2021-07-24 18:03:58 +02:00
v131.go
v132.go
v133.go
v134.go
v135.go
v136.go
v137.go
v138.go
v139.go
v140.go
v141.go
v142.go	A better go code formatter, and now make fmt can run in Windows (#17684)	2021-11-17 20:34:35 +08:00
v143.go
v144.go	A better go code formatter, and now make fmt can run in Windows (#17684)	2021-11-17 20:34:35 +08:00
v145.go
v146.go
v147.go	Fix various documentation, user-facing, and source comment typos (#16367)	2021-07-08 13:38:13 +02:00
v148.go
v149.go
v150.go
v151.go
v152.go
v153.go
v154.go
v155.go
v156.go	Tagger can be empty, as can Commit and Author - tolerate this (#15835)	2021-05-12 01:11:42 -04:00
v157.go
v158.go
v159.go
v160.go
v161.go	Fix database keyword quote problem on migration v161 (#17522)	2021-11-05 00:47:01 +02:00
v162.go	Add support for corporate WeChat webhooks (#15910)	2021-07-23 12:41:27 +08:00
v163.go
v164.go
v165.go
v166.go
v167.go
v168.go
v169.go
v170.go
v171.go
v172.go	v172 migration adds created_unix field instead of expiry (#15458)	2021-04-13 20:04:17 -04:00
v173.go
v174.go
v175.go	A better go code formatter, and now make fmt can run in Windows (#17684)	2021-11-17 20:34:35 +08:00
v176.go
v176_test.go
v177.go
v177_test.go	A better go code formatter, and now make fmt can run in Windows (#17684)	2021-11-17 20:34:35 +08:00
v178.go	Add LFS Migration and Mirror (#14726)	2021-04-08 18:25:57 -04:00
v179.go	OAuth2 auto-register (#5123)	2021-04-14 14:02:12 +02:00
v180.go	Add an abstract json layout to make it's easier to change json library (#16528)	2021-07-24 18:03:58 +02:00
v181.go	Rework repository archive (#14723)	2021-06-23 17:12:38 -04:00
v181_test.go	Always store primary email address into email_address table and also the state (#15956)	2021-06-08 11:52:51 +08:00
v182.go	Add primary_key to issue_index (#16813)	2021-08-25 09:42:51 +01:00
v182_test.go	Add primary_key to issue_index (#16813)	2021-08-25 09:42:51 +01:00
v183.go	Add push to remote mirror repository (#15157)	2021-06-14 19:20:43 +02:00
v184.go	Check if column exist before rename if exist, just return with no error (#17870)	2021-12-02 21:17:24 +08:00
v185.go	Rework repository archive (#14723)	2021-06-23 17:12:38 -04:00
v186.go	Add tag protection (#15629)	2021-06-25 16:28:55 +02:00
v187.go	Refactor Webhook + Add X-Hub-Signature (#16176)	2021-06-27 20:21:09 +01:00
v188.go	Add option to provide signature for a token to verify key ownership (#14054)	2021-07-13 15:28:07 +02:00
v189.go	Add an abstract json layout to make it's easier to change json library (#16528)	2021-07-24 18:03:58 +02:00
v189_test.go	Add an abstract json layout to make it's easier to change json library (#16528)	2021-07-24 18:03:58 +02:00
v190.go	Add agit flow support in gitea (#14295)	2021-07-28 17:42:56 +08:00
v191.go	A better go code formatter, and now make fmt can run in Windows (#17684)	2021-11-17 20:34:35 +08:00
v192.go	Add primary_key to issue_index (#16813)	2021-08-25 09:42:51 +01:00
v193.go	Add repo_id for attachment (#16958)	2021-09-08 17:19:30 +02:00
v193_test.go	Add repo_id for attachment (#16958)	2021-09-08 17:19:30 +02:00
v194.go	Support unprotected file patterns (#16395)	2021-09-11 16:21:17 +02:00
v195.go	Fix commit status index problem (#17061)	2021-09-23 18:50:06 +08:00
v195_test.go	Fix commit status index problem (#17061)	2021-09-23 18:50:06 +08:00
v196.go	Kanban colored boards (#16647)	2021-09-29 22:53:12 +02:00
v197.go	Add a simple way to rename branch like gh (#15870)	2021-10-08 19:03:04 +02:00
v198.go	Save and view issue/comment content history (#16909)	2021-10-10 18:40:03 -04:00
v199.go	Refactor update checker to use AppState (#17387)	2021-10-21 17:10:49 +01:00
v200.go	Sync gitea app path for git hooks and authorized keys when starting (#17335)	2021-10-21 17:22:43 +08:00
v201.go	Refactor update checker to use AppState (#17387)	2021-10-21 17:10:49 +01:00
v202.go	Add support for ssh commit signing (#17743)	2021-12-19 00:37:18 -05:00
v203.go	Support sorting for project board issuses (#17152)	2021-12-08 14:57:18 +08:00
v204.go	Migration 204 use Sync2 (#18044)	2021-12-20 18:58:38 +01:00
v205.go	Increase Salt randomness (#18179)	2022-01-04 15:13:52 +00:00