github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-12-29 18:33:30 +00:00
Code Issues Projects Releases Packages Wiki Activity
hedgedoc/test/private-api
History
David Mehren b4a65b47f0
fix(auth): use sha-512 for auth tokens 
Bcrypt hashes are too slow to be validated on every request.
As our tokens are random and have a fixed length, it is reasonable
to use SHA-512 instead.

SHA-512 is recommended as cryptographically strong by the BSI:
https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TG02102/BSI-TR-02102-1.pdf?__blob=publicationFile

Fixes https://github.com/hedgedoc/hedgedoc/issues/1881

Signed-off-by: David Mehren <git@herrmehren.de>
2021-12-09 23:04:00 +01:00
..
fixtures PrivateE2E: Add test fixtures for private api 2021-03-24 11:14:48 +01:00
alias.e2e-spec.ts fix(note): fix type for owner param 2021-11-14 21:44:59 +01:00
auth.e2e-spec.ts AuthController: Return 409 Conflict when user already exists 2021-10-27 19:39:18 +02:00
history.e2e-spec.ts fix(note): fix type for owner param 2021-11-14 21:44:59 +01:00
me.e2e-spec.ts fix(note): fix type for owner param 2021-11-14 21:44:59 +01:00
media.e2e-spec.ts fix(note): fix type for owner param 2021-11-14 21:44:59 +01:00
notes.e2e-spec.ts test: fix note e2e test 'fails, when user can't read note' 2021-11-21 18:03:29 +01:00
register-and-login.e2e-spec.ts Add E2E tests for login and registration 2021-10-21 19:51:42 +02:00
tokens.e2e-spec.ts fix(auth): use sha-512 for auth tokens 2021-12-09 23:04:00 +01:00