authelia/internal
James Elliott 73bd2e4479
[FIX] Hash Password Cmd Not Encoding Provided Salt (#999)
* using authelia hash-password if you provide a salt it doesn't encode it as a base64 string
* this causes invalid salts to be stored if a user manually provided one instead of reliance on the automatic generation
* additionally bumped the minimum required salt length to 8 as per reference spec
* additionally removed the maximum salt length as per reference spec (actually 2^32-1 per int32)
* see docs:
  * https://tools.ietf.org/html/draft-irtf-cfrg-argon2-10
  * https://github.com/P-H-C/phc-winner-argon2
  * https://github.com/P-H-C/phc-string-format
* encode all salts
* fix edge case of false positive in CheckPassword
* bump crypt version and fix tests
2020-05-14 15:55:03 +10:00
..
authentication [FIX] Hash Password Cmd Not Encoding Provided Salt (#999) 2020-05-14 15:55:03 +10:00
authorization [CI] Add gocritic linter (#977) 2020-05-06 10:52:06 +10:00
commands [FIX] Hash Password Cmd Not Encoding Provided Salt (#999) 2020-05-14 15:55:03 +10:00
configuration [FIX] Hash Password Cmd Not Encoding Provided Salt (#999) 2020-05-14 15:55:03 +10:00
duo [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00
handlers [SECURITY] Fix Authentication HTTP Status Codes (#959) 2020-05-06 07:27:38 +10:00
logging [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00
middlewares [CI] Add gocritic linter (#977) 2020-05-06 10:52:06 +10:00
mocks [SECURITY] Fix Authentication HTTP Status Codes (#959) 2020-05-06 07:27:38 +10:00
models [MISC] Implement golint recommendations (#885) 2020-04-20 23:03:38 +02:00
notification [CI] Add gocritic linter (#977) 2020-05-06 10:52:06 +10:00
regulation [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00
server [BUGFIX] Add routes for files in the root path (#988) 2020-05-07 13:29:12 +02:00
session [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00
storage [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00
suites [DEPRECATE] Environment Variable Secrets (#905) 2020-05-08 11:01:57 +10:00
templates Force TLS and valid x509 certs in SMTP Notifier by default 2020-01-10 17:37:16 +01:00
utils [CI] Add gocritic linter (#977) 2020-05-06 10:52:06 +10:00