gitblit.git - Pure java git solution: https://github.com/gitblit-org/gitblit

	Commit message (Collapse)	Author	Age	Files	Lines
*	Delete password from memory in AuthenticationManager	Florian Zschocke	2020-04-05	1	-11/+73
\| \| \| \| \| \|	Zero out the password to remove it from memory after use. This is only a first step, implementing it for one method: `AuthenticationManager.authenticate(String, char[], String)`.
*	🦟 fix: Password hash upgrade kills existing passwords	Florian Zschocke	2020-04-05	1	-4/+12
\| \| \| \| \| \| \| \| \| \|	The upgrade of a MD5 stored password hash to a PBKDF password hash destroys the stored password. The has check zeroes out the password that is tested, so that the new hash is built over the zeroed out value. This fix prevents that an also adds a check to the test. Fixes #1335
*	Use the new PasswordHash classes.	Florian Zschocke	2019-11-05	1	-6/+32
\| \| \| \| \| \|	Integrate the `PasswordHash` class and subclass in the user and password editing and authentication. Replaces the old code and the previous `SecurePasswordHashingUtils` class.
*	Update AuthenticationManager to update weakly stored passwords on login	Martin Spielmann	2017-01-07	1	-0/+6
\|
*	Log update for Fail2Ban usage	Paul Martin	2015-10-25	1	-2/+2
\| \| \| \| \|	+ Adds standard logging for all authentication providers + Updates help page to use default GitBlit SSH port
*	A patch that allows to extract a new user informations from the HTTP session	Fabrice Bacchella	2015-05-15	1	-17/+658
\| \| \| \|	if the webapp container can fill it.
*	Create infrastructure for XSS sanitization	James Moger	2014-09-07	1	-1/+4
\|
*	Add repository and user/team lifecycle listener extension points	James Moger	2014-06-09	1	-1/+1
\|
*	Implement user "disabled" flag as an alternative to deleting the account	James Moger	2014-03-04	1	-0/+66