0
0
Fork 0
mirror of https://github.com/go-gitea/gitea synced 2024-12-25 15:34:39 +01:00
gitea/modules/setting
zeripath e0853d4a21
Add API Token Cache (#16547)
One of the issues holding back performance of the API is the problem of hashing.
Whilst banning BASIC authentication with passwords will help, the API Token scheme
still requires a PBKDF2 hash - which means that heavy API use (using Tokens) can
still cause enormous numbers of hash computations.

A slight solution to this whilst we consider moving to using JWT based tokens and/or
a session orientated solution is to simply cache the successful tokens. This has some
security issues but this should be balanced by the security issues of load from
hashing.

Related #14668

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2021-08-17 14:30:42 -04:00
..
attachment.go
cache.go
cors.go Allow setting X-FRAME-OPTIONS (#16643) 2021-08-06 16:47:10 -04:00
cron.go
cron_test.go
database.go
database_sqlite.go
database_test.go
git.go
indexer.go Fix various documentation, user-facing, and source comment typos (#16367) 2021-07-08 13:38:13 +02:00
indexer_test.go
lfs.go
log.go Add an abstract json layout to make it's easier to change json library (#16528) 2021-07-24 18:03:58 +02:00
mailer.go Sendmail should create a process on the gitea system and have a default timeout (#11256) 2020-05-03 00:04:31 +01:00
markup.go Make Mermaid.js limit configurable (#16519) 2021-07-24 00:21:51 -04:00
migrations.go
mime_type_map.go
oauth2_client.go
picture.go
project.go
queue.go
repository.go
service.go add configuration option to restrict users by default (#16256) 2021-07-15 15:19:48 -04:00
session.go Add an abstract json layout to make it's easier to change json library (#16528) 2021-07-24 18:03:58 +02:00
setting.go Add API Token Cache (#16547) 2021-08-17 14:30:42 -04:00
setting_test.go Add an abstract json layout to make it's easier to change json library (#16528) 2021-07-24 18:03:58 +02:00
storage.go
storage_test.go
task.go
webhook.go Add support for corporate WeChat webhooks (#15910) 2021-07-23 12:41:27 +08:00