gitea

History

Gusted 623c93ff46 Increase Salt randomness (#18179 ) - The current implementation of `RandomString` doesn't give you a most-possible unique randomness. It gives you 6`length` instead of the possible 8`length` bits(or as `length`x bytes) randomness. This is because `RandomString` is being limited to a max value of 63, this in order to represent the random byte as a letter/digit. - The recommendation of pbkdf2 is to use 64+ bit salt, which the `RandomString` doesn't give with a length of 10, instead of increasing 10 to a higher number, this patch adds a new function called `RandomBytes` which does give you the guarentee of 8*`length` randomness and thus corresponding of `length`x bytes randomness. - Use hexadecimal to store the bytes value in the database, as mentioned, it doesn't play nice in order to convert it to a string. This will always be a length of 32(with `length` being 16). - When we detect on `Authenticate`(source: db) that a user has the old format of salt, re-hash the password such that the user will have it's password hashed with increased salt. Thanks to @zeripath for working out the rouge edges from my first commit 😄. Co-authored-by: lafriks <lauris@nix.lv> Co-authored-by: zeripath <art27@cantab.net>		3 years ago
..
admin	Move user/org deletion to services (#17673 )	3 years ago
appstate	Sync gitea app path for git hooks and authorized keys when starting (#17335 )	3 years ago
asymkey	Refactor auth package (#17962 )	3 years ago
auth	Refactor auth package (#17962 )	3 years ago
avatars	Make AvatarRenderedSizeFactor configurable and set it to 3 (#17951 )	3 years ago
db	Refactor auth package (#17962 )	3 years ago
fixtures	tests: add coverage for models migration helpers (#18162 )	3 years ago
issues	Simplify parameter types (#18006 )	3 years ago
migrations	Increase Salt randomness (#18179 )	3 years ago
perm	Move accessmode into models/perm (#17828 )	3 years ago
repo	Refactor auth package (#17962 )	3 years ago
unit	Move unit into models/unit/ (#17576 )	3 years ago
unittest	tests: s/GITEA_UNIT_TESTS_VERBOSE/GITEA_UNIT_TESTS_LOG_SQL/ (#18142 )	3 years ago
user	Increase Salt randomness (#18179 )	3 years ago
webhook	Remove NewSession method from db.Engine interface (#17577 )	3 years ago
access.go	Move repository model into models/repo (#17933 )	3 years ago
access_test.go	Move repository model into models/repo (#17933 )	3 years ago
action.go	Prevent hang in git cat-file if repository is not a valid repository and other fixes (#17991 )	3 years ago
action_list.go	Move repository model into models/repo (#17933 )	3 years ago
action_test.go	Some repository refactors (#17950 )	3 years ago
branches.go	Move repository model into models/repo (#17933 )	3 years ago
branches_test.go	Move repository model into models/repo (#17933 )	3 years ago
commit.go	Move keys to models/asymkey (#17917 )	3 years ago
commit_status.go	Add missing `X-Total-Count` and fix some related bugs (#17968 )	3 years ago
commit_status_test.go	Move repository model into models/repo (#17933 )	3 years ago
consistency.go	Move repository model into models/repo (#17933 )	3 years ago
consistency_test.go	A better go code formatter, and now `make fmt` can run in Windows (#17684 )	3 years ago
engine_test.go	Refactor install page (db type) (#17919 )	3 years ago
error.go	Some repository refactors (#17950 )	3 years ago
fixture_generation.go	Move repository model into models/repo (#17933 )	3 years ago
fixture_test.go	Decouple unit test code from business code (#17623 )	3 years ago
helper.go	Move repository model into models/repo (#17933 )	3 years ago
helper_directory.go	refactor: move from io/ioutil to io and os package (#17109 )	3 years ago
helper_environment.go	Move repository model into models/repo (#17933 )	3 years ago
issue.go	Use conditions but not repo ids as query condition (#16839 )	3 years ago
issue_assignees.go	Move repository model into models/repo (#17933 )	3 years ago
issue_assignees_test.go	Move user related model into models/user (#17781 )	3 years ago
issue_comment.go	Add API to get issue/pull comments and events (timeline) (#17403 )	3 years ago
issue_comment_list.go	Move repository model into models/repo (#17933 )	3 years ago
issue_comment_test.go	Move repository model into models/repo (#17933 )	3 years ago
issue_dependency.go	Move repository model into models/repo (#17933 )	3 years ago
issue_dependency_test.go	Move user related model into models/user (#17781 )	3 years ago
issue_label.go	Move repository model into models/repo (#17933 )	3 years ago
issue_label_test.go	Move repository model into models/repo (#17933 )	3 years ago
issue_list.go	Use conditions but not repo ids as query condition (#16839 )	3 years ago
issue_list_test.go	Decouple unit test, remove intermediate `unittestbridge` package (#17662 )	3 years ago
issue_lock.go	Move user related model into models/user (#17781 )	3 years ago
issue_milestone.go	Simplify parameter types (#18006 )	3 years ago
issue_milestone_test.go	Move repository model into models/repo (#17933 )	3 years ago
issue_reaction.go	Add missing `X-Total-Count` and fix some related bugs (#17968 )	3 years ago
issue_reaction_test.go	Move repository model into models/repo (#17933 )	3 years ago
issue_stopwatch.go	Move repository model into models/repo (#17933 )	3 years ago
issue_stopwatch_test.go	Move user related model into models/user (#17781 )	3 years ago
issue_test.go	Use conditions but not repo ids as query condition (#16839 )	3 years ago
issue_tracked_time.go	Move repository model into models/repo (#17933 )	3 years ago
issue_tracked_time_test.go	Move user related model into models/user (#17781 )	3 years ago
issue_user.go	Move repository model into models/repo (#17933 )	3 years ago
issue_user_test.go	Move repository model into models/repo (#17933 )	3 years ago
issue_watch.go	Add missing `X-Total-Count` and fix some related bugs (#17968 )	3 years ago
issue_watch_test.go	A better go code formatter, and now `make fmt` can run in Windows (#17684 )	3 years ago
issue_xref.go	Move repository model into models/repo (#17933 )	3 years ago
issue_xref_test.go	Move repository model into models/repo (#17933 )	3 years ago
lfs.go	Allow admin to associate missing LFS objects for repositories (#18143 )	3 years ago
lfs_lock.go	Move repository model into models/repo (#17933 )	3 years ago
main_test.go	Move keys to models/asymkey (#17917 )	3 years ago
migrate.go	tests: add coverage for models migration helpers (#18162 )	3 years ago
migrate_test.go	tests: add coverage for models migration helpers (#18162 )	3 years ago
notification.go	Some repository refactors (#17950 )	3 years ago
notification_test.go	Move user related model into models/user (#17781 )	3 years ago
org.go	Some repository refactors (#17950 )	3 years ago
org_team.go	Prevent hang in git cat-file if repository is not a valid repository and other fixes (#17991 )	3 years ago
org_team_test.go	Move repository model into models/repo (#17933 )	3 years ago
org_test.go	Move repository model into models/repo (#17933 )	3 years ago
project.go	Remove NewSession method from db.Engine interface (#17577 )	3 years ago
project_board.go	Support sorting for project board issuses (#17152 )	3 years ago
project_issue.go	Move repository model into models/repo (#17933 )	3 years ago
project_test.go	Decouple unit test code from business code (#17623 )	3 years ago
protected_tag.go	Move repository model into models/repo (#17933 )	3 years ago
protected_tag_test.go	Move repository model into models/repo (#17933 )	3 years ago
pull.go	Move repository model into models/repo (#17933 )	3 years ago
pull_list.go	Don't delete branch if other PRs with this branch are open (#18164 )	3 years ago
pull_test.go	Don't delete branch if other PRs with this branch are open (#18164 )	3 years ago
release.go	Some repository refactors (#17950 )	3 years ago
repo.go	Fix performance regression when user has many organization (#18125 )	3 years ago
repo_activity.go	Move repository model into models/repo (#17933 )	3 years ago
repo_collaboration.go	Some repository refactors (#17950 )	3 years ago
repo_collaboration_test.go	Move repository model into models/repo (#17933 )	3 years ago
repo_generate.go	Some repository refactors (#17950 )	3 years ago
repo_generate_test.go	Fixed assert statements. (#16089 )	3 years ago
repo_list.go	Use conditions but not repo ids as query condition (#16839 )	3 years ago
repo_list_test.go	Decouple unit test, remove intermediate `unittestbridge` package (#17662 )	3 years ago
repo_permission.go	Use conditions but not repo ids as query condition (#16839 )	3 years ago
repo_permission_test.go	Move repository model into models/repo (#17933 )	3 years ago
repo_test.go	Some repository refactors (#17950 )	3 years ago
repo_transfer.go	Some repository refactors (#17950 )	3 years ago
repo_transfer_test.go	Move repository model into models/repo (#17933 )	3 years ago
review.go	Move repository model into models/repo (#17933 )	3 years ago
review_test.go	Move user related model into models/user (#17781 )	3 years ago
statistic.go	Refactor auth package (#17962 )	3 years ago
task.go	Move repository model into models/repo (#17933 )	3 years ago
token.go	Refactor auth package (#17962 )	3 years ago
token_test.go	A better go code formatter, and now `make fmt` can run in Windows (#17684 )	3 years ago
upload.go	Remove NewSession method from db.Engine interface (#17577 )	3 years ago
user.go	Use conditions but not repo ids as query condition (#16839 )	3 years ago
user_heatmap.go	Move user related model into models/user (#17781 )	3 years ago
user_heatmap_test.go	Move user related model into models/user (#17781 )	3 years ago
user_test.go	Use conditions but not repo ids as query condition (#16839 )	3 years ago
userlist.go	Move more model into models/user (#17826 )	3 years ago
userlist_test.go	Move more model into models/user (#17826 )	3 years ago