hedgedoc/src
Philip Molares 46b5cdfb47
auth: Fix secret length
The former length of 64 bytes (512-bit) is transformed into base64url (a 6-bit code) ~86 characters long. This is too long for bcrypt as it ignores any characters beyond the 72th.
This fix therefore reduces the amount of generated bytes to 54 (as 72*6/8 = 54) characters. This ensures that removing one character from the token the hash won't be the same anymore.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
2021-01-28 12:18:20 +01:00
..
api auth: Add maximum token lifetime of 2 years. 2021-01-25 12:14:26 +01:00
auth auth: Fix secret length 2021-01-28 12:18:20 +01:00
authors Change year in copyright to 2021 2021-01-06 21:36:07 +01:00
config config: Fix inconsistent env vars 2021-01-28 23:28:16 +01:00
errors auth: Add token limit of 200 2021-01-25 12:05:25 +01:00
groups auth: Add tests for AuthService 2021-01-22 15:29:10 +01:00
history HistoryEntryDto: Add doc comments 2021-01-25 22:45:52 +01:00
logger Change year in copyright to 2021 2021-01-06 21:36:07 +01:00
media auth: Add tests for AuthService 2021-01-22 15:29:10 +01:00
monitoring Format with Prettier 2 2021-01-06 23:48:53 +01:00
notes NoteDto: Add doc comments 2021-01-25 22:45:34 +01:00
permissions auth: Add tests for AuthService 2021-01-22 15:29:10 +01:00
revisions RevisionMetadataDto: Add doc comments 2021-01-25 22:44:20 +01:00
users UserInfoDto: Add doc comments 2021-01-25 22:22:01 +01:00
utils Swagger: Split public and private API 2021-01-25 23:11:56 +01:00
app.module.ts auth: Add cron to clean old tokens 2021-01-24 20:37:04 +01:00
main.ts Swagger: Split public and private API 2021-01-25 23:11:56 +01:00