Files
@ 4e0442f914b9
Branch filter:
Location: kallithea/docs/index.rst
4e0442f914b9
1.3 KiB
text/prs.fallenstein.rst
auth: accept sha256 passwords on all platforms - not only on Windows
Give less surprises when changing platform.
Still, bcrypt is only supported and used on Posix.
bcrypt "hashes" will have length 60 and start with '$' and will thus
immediately skip the sha256 check.
The change should be safe: Users can't influence what kind of hashed key will
be in the database and can thus not influence the auth method.
(We really should use bcrypt on Windows too ... or change to something more
state of the art.)
Give less surprises when changing platform.
Still, bcrypt is only supported and used on Posix.
bcrypt "hashes" will have length 60 and start with '$' and will thus
immediately skip the sha256 check.
The change should be safe: Users can't influence what kind of hashed key will
be in the database and can thus not influence the auth method.
(We really should use bcrypt on Windows too ... or change to something more
state of the art.)