fix: use sufficient computational effort for password hash - #3422

Merged

jsjoeio merged 27 commits into

mainfrom

jsjoeio/fix-password-hash

Jun 9, 2021

Commits on Jun 8, 2021

chore: update CHANGELOG
jsjoeio
committed
dd2cb16
refactor: use bcrypt in hash function
jsjoeio
committed
cac6673
refactor: use bcrypt in e2e setup
jsjoeio
committed
17be8c5
feat: add unit test for hash function
jsjoeio
committed
f35120c
refactor: add functions to check hash password
jsjoeio
committed
aaf0447
feat: add tests using real hashes
jsjoeio
committed
fc3326f
chore: add argon2 package
jsjoeio
committed
dc2db5c
chore: update to argon2 in test
jsjoeio
committed
51f8341
refactor: use argon2 instead of bcrypt
jsjoeio
committed
70197bb
refactor: update unit tests for hash fns
jsjoeio
committed
fd3cb6c
refactor: update login logic with new async hashing
jsjoeio
committed
fcc3f0d
refactor: make authenticated async everywhere
jsjoeio
committed
0cdbd33
refactor: make ensureAuthenticated async
jsjoeio
committed
91303d4
refactor: make wsProxy async
jsjoeio
committed
1134780
refactor: update hash fn in test config
jsjoeio
committed
788b958
feat: update cli and test for hashed-password
jsjoeio
committed
ffa5c16
feat: add getPasswordMethod & test for it
jsjoeio
committed
7ff4117
feat: add handlePasswordValidation + tests
jsjoeio
committed
a14ea39
refactor: rewrite password logic at /login
jsjoeio
committed
409b473
feat: add isCookieValid function and tests
jsjoeio
committed
6020480
refactor: password logic in http w/ isCookieValid
jsjoeio
committed
923761c
docs: update FAQ with new hashing instructions
jsjoeio
committed
517aaf7
feat: add splitOnFirstEquals function
jsjoeio
committed
531b7c0
refactor: parse options with multiple = in cli
jsjoeio
committed
8c2bb61
feat: add npm_config_build_from_source to build scripts
jsjoeio
committed
deaa224
fix: sanitize password and cookie key
jsjoeio
committed
3b50bfc
feat: check for empty str in isHashMatch
jsjoeio
committed
1e55a64

fix: use sufficient computational effort for password hash by jsjoeio · Pull Request #3422 · coder/code-server · GitHub

Uh oh!

fix: use sufficient computational effort for password hash - #3422

fix: use sufficient computational effort for password hash#3422
jsjoeio merged 27 commits into
mainfrom
jsjoeio/fix-password-hash

Commits on Jun 8, 2021

chore: update CHANGELOG

refactor: use bcrypt in hash function

refactor: use bcrypt in e2e setup

feat: add unit test for hash function

refactor: add functions to check hash password

feat: add tests using real hashes

chore: add argon2 package

chore: update to argon2 in test

refactor: use argon2 instead of bcrypt

refactor: update unit tests for hash fns

refactor: update login logic with new async hashing

refactor: make authenticated async everywhere

refactor: make ensureAuthenticated async

refactor: make wsProxy async

refactor: update hash fn in test config

feat: update cli and test for hashed-password

feat: add getPasswordMethod & test for it

feat: add handlePasswordValidation + tests

refactor: rewrite password logic at /login

feat: add isCookieValid function and tests

refactor: password logic in http w/ isCookieValid

docs: update FAQ with new hashing instructions

feat: add splitOnFirstEquals function

refactor: parse options with multiple = in cli

feat: add npm_config_build_from_source to build scripts

fix: sanitize password and cookie key

feat: check for empty str in isHashMatch

fix: use sufficient computational effort for password hash by jsjoeio · Pull Request #3422 · coder/code-server · GitHub

Uh oh!

fix: use sufficient computational effort for password hash - #3422

fix: use sufficient computational effort for password hash#3422jsjoeio merged 27 commits intomaincoder/code-server:mainfrom jsjoeio/fix-password-hashcoder/code-server:jsjoeio/fix-password-hashCopy head branch name to clipboard

Commits

Commits on Jun 8, 2021

fix: use sufficient computational effort for password hash#3422
jsjoeio merged 27 commits into
mainfrom
jsjoeio/fix-password-hash