forgejo/routers/api/v1
zeripath c702e7995d
Provide the ability to set password hash algorithm parameters (#22942) (#22943)
Backport #22942

This PR refactors and improves the password hashing code within gitea
and makes it possible for server administrators to set the password
hashing parameters

In addition it takes the opportunity to adjust the settings for `pbkdf2`
in order to make the hashing a little stronger.

The majority of this work was inspired by PR #14751 and I would like to
thank @boppy for their work on this.

Thanks to @gusted for the suggestion to adjust the `pbkdf2` hashing
parameters.

Close #14751

---------

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-02-19 15:35:52 +08:00
..
activitypub Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
admin Provide the ability to set password hash algorithm parameters (#22942) (#22943) 2023-02-19 15:35:52 +08:00
misc Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551) 2022-10-24 20:29:17 +01:00
notify Move some files into models' sub packages (#20262) 2022-08-25 10:31:57 +08:00
org [API] teamSearch show teams with no members if user is admin (#21204) 2022-09-19 20:02:29 +08:00
packages Add support for Vagrant packages (#20930) 2022-08-29 15:04:45 +08:00
repo Add sync_on_commit option for push mirrors api (#22271) (#22292) 2022-12-31 19:46:14 +08:00
settings Make mirror feature more configurable (#16957) 2021-09-07 17:49:36 +02:00
swagger Add API endpoint to get changed files of a PR (#21177) 2022-09-29 04:27:20 +02:00
user Record OAuth client type at registration (#21316) 2022-10-24 15:59:24 +08:00
utils Use complete SHA to create and query commit status (#22244) (#22257) 2022-12-28 11:03:21 +01:00
api.go Prevent panic on looking at api "git" endpoints for empty repos (#22457) (#22458) 2023-01-15 14:35:56 +00:00
auth.go Remove legacy +build: constraint (#19582) 2022-05-02 23:22:45 +08:00
auth_windows.go Let web and API routes have different auth methods group (#19168) 2022-03-28 12:46:28 +08:00