aurweb/upgrading
Lukas Fleischer 29a48708bb Use bcrypt to hash passwords
Replace the default hash function used for storing passwords by
password_hash() which internally uses bcrypt. Legacy MD5 hashes are
still supported and are immediately converted to the new format when a
user logs in.

Since big parts of the authentication system needed to be rewritten in
this context, this patch also includes some simplification and
refactoring of all code related to password checking and resetting.

Fixes FS#52297.

Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
2017-02-24 22:04:49 +01:00
..
1.2.10.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.3.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.5.2.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.5.3.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.7.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.8.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.8.1.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.8.2.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.9.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
1.9.1.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
2.0.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
2.1.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
2.2.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
2.3.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
3.0.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
3.1.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
3.2.0.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
3.4.0.txt Add a new user group "Trusted User & Developer" 2014-07-15 22:58:57 +02:00
3.5.0.txt Always use virtual URLs 2014-11-21 11:43:31 +01:00
4.0.0.txt Add support for multiple SSH public keys 2015-06-27 13:04:03 +02:00
4.1.0.txt Add option to hide one's email address 2015-09-20 22:01:23 +02:00
4.2.0.txt Add support for package update notifications 2016-02-07 10:54:20 +01:00
4.2.1.txt Store last login address as plain text 2016-03-13 11:47:30 +01:00
4.3.0.txt Make LangPreference DB field wide enough to fit es_419 2016-07-24 18:51:05 +02:00
4.4.0.txt upgrading/4.4.0.txt: Warn about new scripts 2016-10-11 08:45:45 +02:00
4.4.1.txt Make maintenance scripts installable 2016-10-17 15:23:13 +02:00
4.5.0.txt Use bcrypt to hash passwords 2017-02-24 22:04:49 +01:00
longerpkgname.txt Split UPGRADING 2014-06-29 23:10:45 +02:00
post-checkout Add an example post-checkout hook 2016-02-11 19:19:29 +01:00