hedgedoc/test/private-api
David Mehren b4a65b47f0
fix(auth): use sha-512 for auth tokens
Bcrypt hashes are too slow to be validated on every request.
As our tokens are random and have a fixed length, it is reasonable
to use SHA-512 instead.

SHA-512 is recommended as cryptographically strong by the BSI:
https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TG02102/BSI-TR-02102-1.pdf?__blob=publicationFile

Fixes https://github.com/hedgedoc/hedgedoc/issues/1881

Signed-off-by: David Mehren <git@herrmehren.de>
2021-12-09 23:04:00 +01:00
..
fixtures
alias.e2e-spec.ts
auth.e2e-spec.ts
history.e2e-spec.ts
me.e2e-spec.ts
media.e2e-spec.ts
notes.e2e-spec.ts test: fix note e2e test 'fails, when user can't read note' 2021-11-21 18:03:29 +01:00
register-and-login.e2e-spec.ts
tokens.e2e-spec.ts fix(auth): use sha-512 for auth tokens 2021-12-09 23:04:00 +01:00