mirror of
https://github.com/hedgedoc/hedgedoc.git
synced 2024-12-23 13:42:16 +00:00
b4a65b47f0
Bcrypt hashes are too slow to be validated on every request. As our tokens are random and have a fixed length, it is reasonable to use SHA-512 instead. SHA-512 is recommended as cryptographically strong by the BSI: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TG02102/BSI-TR-02102-1.pdf?__blob=publicationFile Fixes https://github.com/hedgedoc/hedgedoc/issues/1881 Signed-off-by: David Mehren <git@herrmehren.de> |
||
---|---|---|
.. | ||
fixtures | ||
alias.e2e-spec.ts | ||
auth.e2e-spec.ts | ||
history.e2e-spec.ts | ||
me.e2e-spec.ts | ||
media.e2e-spec.ts | ||
notes.e2e-spec.ts | ||
register-and-login.e2e-spec.ts | ||
tokens.e2e-spec.ts |