szurubooru.git/server/szurubooru/func/auth.py, branch masterFork of Szurubooru with patches for running on a modern system sans Docker
https://git.jakob.space/szurubooru.git/atom?h=master2021-11-29T23:39:34Zserver: fix python docstring formatting2021-11-29T23:39:34ZShyam Sundersgsunder1@gmail.com2021-11-29T23:39:34Zurn:sha1:9b3123a8150faee660b4311d9d8c2c85a83b32b5client+server: implement code autoformatting using prettier and black2020-06-06T12:58:23ZShyam Sundersgsunder1@gmail.com2020-06-05T22:03:37Zurn:sha1:57193b57157b7a42896c887a2d5930493ac7b290server: format code to flake82020-06-05T14:02:18ZShyam Sundersgsunder1@gmail.com2020-06-05T14:02:18Zurn:sha1:ea623449e7c29801ab0a0ade043308937cca7506server/auth: add token authentication2018-03-25T20:23:29ZReAnzuanzu@reanzu.com2018-02-25T10:44:02Zurn:sha1:2a69f0193f9e5aa451e0dbcb8c89070f3e49ffa5
* Users are only authenticated against their password on login,
and to retrieve a token
* Passwords are wiped from the GUI frontend and cookies
after login and token retrieval
* Tokens are revoked at the end of the session/logout
* If the user chooses the "remember me" option,
the token is stored in the cookie
* Tokens correctly delete themselves on logout
* Tokens can expire at user-specified date
* Tokens have their last usage time
* Tokens can have user defined descriptions
* Users can manage login tokens in their account settings
server/users: harden password hashes2018-03-08T22:40:47ZReAnzuanzu@reanzu.com2018-02-25T05:45:00Zurn:sha1:3f52aceca44bc52e0c8654f46c66073320109ae9
- Changed password setup to use libsodium and argon2id (regular SHA256
hashing for passwords is inadequate as modern GPU's can hash generate
billions of hashes per second).
- Added code to auto migrate old passwords to the new password_hash if
the existing password_hash matches either of the legacy password
generation schemes (SHA1 or SHA256).
- Added migration to support new password_hash format length
- Added column password_revision. This field will default to 0, which
all passwords will have till they're updated. After that each password
hash method has a revision.
server: refactor + add type hinting2017-02-05T15:34:45Zrr-rr-@sakuya.pl2017-02-04T00:08:12Zurn:sha1:ad842ee8a54c57463b8e28b52970f173ea1d64ea
- Added type hinting (for now, 3.5-compatible)
- Split `db` namespace into `db` module and `model` namespace
- Changed elastic search to be created lazily for each operation
- Changed to class based approach in entity serialization to allow
stronger typing
- Removed `required` argument from `context.get_*` family of functions;
now it's implied if `default` argument is omitted
- Changed `unalias_dict` implementation to use less magic inputs
server/general: embrace most of PEP82016-08-14T14:44:03Zrr-rr-@sakuya.pl2016-08-14T12:22:53Zurn:sha1:9aea55e3d10188cec8d1926704610a2567ca718a
Ignored only the rules about continuing / hanging indentation.
Also, added __init__.py to tests so that pylint discovers them. (I don't
buy pytest's BS about installing your package.)
server/general: add assertions2016-08-14T14:43:04Zrr-rr-@sakuya.pl2016-08-14T08:45:00Zurn:sha1:c2bbf7b62ca58cf6360d6c3bad67fe2f4e02f40fserver/users: implement RANK_MAP2016-05-10T10:15:33Zrr-rr-@sakuya.pl2016-05-10T09:58:55Zurn:sha1:4ec842024c0bebe7012a315a24e74b2a9e1330e2server/users: hardcode available ranks2016-05-08T14:59:25Zrr-rr-@sakuya.pl2016-05-08T14:59:25Zurn:sha1:198cb0af3e18bb8b526199d309d50df764e36552