forgejo/models
zeripath c702e7995d
Provide the ability to set password hash algorithm parameters (#22942) (#22943)
Backport #22942

This PR refactors and improves the password hashing code within gitea
and makes it possible for server administrators to set the password
hashing parameters

In addition it takes the opportunity to adjust the settings for `pbkdf2`
in order to make the hashing a little stronger.

The majority of this work was inspired by PR #14751 and I would like to
thank @boppy for their work on this.

Thanks to @gusted for the suggestion to adjust the `pbkdf2` hashing
parameters.

Close #14751

---------

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-02-19 15:35:52 +08:00
..
activities Don't return duplicated users who can create org repo (#22560) (#22562) 2023-01-30 16:59:20 +00:00
admin Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2022-10-18 07:50:37 +02:00
asymkey Fix key signature error page (#22229) (#22230) 2022-12-30 12:53:23 +08:00
auth Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
avatars Fix get system setting bug when enabled redis cache (#22298) 2023-01-01 23:24:01 +08:00
db some refactor about code comments(#20821) (#22707) 2023-02-16 21:21:25 +08:00
fixtures Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2023-02-19 15:35:52 +08:00
foreignreference Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2022-10-18 07:50:37 +02:00
git Use complete SHA to create and query commit status (#22244) (#22257) 2022-12-28 11:03:21 +01:00
issues some refactor about code comments(#20821) (#22707) 2023-02-16 21:21:25 +08:00
migrations Init git module before database migration (#21764) (#21765) 2022-11-10 14:22:41 +00:00
organization Don't return duplicated users who can create org repo (#22560) (#22562) 2023-01-30 16:59:20 +00:00
packages Fix container blob mount (#22226) (#22476) 2023-01-17 14:50:45 +08:00
perm Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
project Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
pull Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2022-10-18 07:50:37 +02:00
repo Fix error when calculate the repository size (#22392) (#22474) 2023-01-16 16:07:06 -06:00
system Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479) (#22496) 2023-01-18 10:30:34 -06:00
unit
unittest
user Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2023-02-19 15:35:52 +08:00
webhook Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
error.go Make every not exist error unwrappable to a fs.ErrNotExist (#20891) 2022-10-18 07:50:37 +02:00
fixture_generation.go
fixture_test.go
main_test.go
migrate.go
migrate_test.go
org.go Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
org_team.go Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
org_team_test.go
org_test.go
repo.go Fix issue/PR numbers (#22037) (#22044) 2022-12-07 14:20:12 +08:00
repo_collaboration.go Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
repo_collaboration_test.go
repo_test.go
repo_transfer.go Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
repo_transfer_test.go
user.go Prevent dangling user redirects (#21856) (#21858) 2022-11-18 22:25:00 +08:00