2 commits

Author	SHA1	Message	Date
David Mehren	3e074d1879	fix(auth): use sha-512 for auth tokens ... Bcrypt hashes are too slow to be validated on every request. As our tokens are random and have a fixed length, it is reasonable to use SHA-512 instead. SHA-512 is recommended as cryptographically strong by the BSI: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TG02102/BSI-TR-02102-1.pdf?__blob=publicationFile Fixes https://github.com/hedgedoc/hedgedoc/issues/1881 Signed-off-by: David Mehren <git@herrmehren.de>	2021-12-13 22:44:38 +01:00
David Mehren	4428f3fb39	Separate private and public API in TestSetup ... Including both PublicApiModule and PrivateApiModule in the test setup lead to the API routes overwriting each other. This adds a router to separate the APIs as they are in the normal app. Signed-off-by: David Mehren <git@herrmehren.de>	2021-10-21 20:17:03 +02:00

Renamed from test/public-api/tokens.e2e-spec.ts (Browse further)