HedgeDoc - Ideas grow better together
Find a file
David Mehren b4a65b47f0
fix(auth): use sha-512 for auth tokens
Bcrypt hashes are too slow to be validated on every request.
As our tokens are random and have a fixed length, it is reasonable
to use SHA-512 instead.

SHA-512 is recommended as cryptographically strong by the BSI:
https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TG02102/BSI-TR-02102-1.pdf?__blob=publicationFile

Fixes https://github.com/hedgedoc/hedgedoc/issues/1881

Signed-off-by: David Mehren <git@herrmehren.de>
2021-12-09 23:04:00 +01:00
.github ci: setup njsscan 2021-11-11 20:14:41 +01:00
.idea/copyright
.reuse
.yarn chore(deps): update yarn to v3.1.1 2021-12-04 13:06:20 +00:00
docs chore(deps): update dependency mkdocs-material to v8.1.0 2021-12-11 10:42:06 +00:00
LICENSES Add REUSE license info for Yarn 2 2021-09-05 18:22:47 +02:00
public
src fix(auth): use sha-512 for auth tokens 2021-12-09 23:04:00 +01:00
test fix(auth): use sha-512 for auth tokens 2021-12-09 23:04:00 +01:00
.editorconfig
.env.example
.eslintrc.js Fix tests with using sessions in e2e tests of private api 2021-10-13 20:43:56 +02:00
.gitignore Setup .gitignore for Yarn 2 2021-09-05 18:05:26 +02:00
.mailmap
.mailmap.license
.prettierrc Update .prettierrc for sort-imports v3 2021-10-27 17:58:00 +02:00
.prettierrc.license
.yarnrc.yml chore(deps): update yarn to v3.1.1 2021-12-04 13:06:20 +00:00
.yarnrc.yml.license Add REUSE license info for Yarn 2 2021-09-05 18:22:47 +02:00
AUTHORS
CHANGELOG.md
CODE_OF_CONDUCT.md
codecov.yml ci(codecov): Wait for 2 builds to be submitted 2021-12-05 22:22:46 +01:00
CONTRIBUTING.md
eslint-local-rules.js
jest-e2e.json Move tsconfig.test.json to test directory 2021-10-14 19:55:55 +02:00
jest-e2e.json.license
LICENSE
nest-cli.json
nest-cli.json.license
package.json chore(deps): update linters to v5.6.0 2021-12-11 10:42:35 +00:00
package.json.license
README.md
renovate.json ci(renovate): separate major updates 2021-11-16 18:01:48 +01:00
renovate.json.license
SECURITY.md Update security.md to match state in master branch 2021-09-21 15:19:46 +02:00
tsconfig.build.json
tsconfig.build.json.license
tsconfig.json Remove typeRoots from tsconfig 2021-09-06 16:35:54 +02:00
tsconfig.json.license
yarn.lock chore(deps): lock file maintenance (#1901) 2021-12-13 03:19:47 +00:00
yarn.lock.license

HedgeDoc Logo

#HedgeDoc on matrix.org version POEditor Mastodon Twitter REUSE Compliance Check Nest.JS CI codecov

HedgeDoc lets you create real-time collaborative markdown notes.

Getting Started

State of the project

HedgeDoc 1.x is stable and used around the world, but the codebase has grown over time, making it hard to add new features.
We are currently working on HedgeDoc 2, a complete rewrite of HedgeDoc. Please note the following:

  • This branch contains the latest development code and does not implement all features yet. If you are looking for the 1.x source code, have a look at the master branch.
  • HedgeDoc 2 will be split in two components: the backend (this repo) and the frontend in the react-client repo.
  • The 1.x release is maintenance-only. We do not accept feature requests or PRs for this release anymore and may choose to close non-critical bug reports, if the bug will be non-existent in 2.0.

Contributions

We welcome contributions!
Have a look at our contribution docs to find out how you can help. If you want to contribute to HedgeDoc 2, please join our development chat.

License

Licensed under AGPLv3. For our list of contributors, see AUTHORS.

The license does not include the HedgeDoc logo, whose terms of usage can be found in the github repository.