15 Commits

Author	SHA1	Message	Date
GreyXor	4bfc3b95b5	bcrypt: wrong cost flag name (#7168)	2025-08-11 15:46:32 +03:00
GreyXor	49dac61b07	bcrypt: add cost parameter to hash-password (#7149) ... * feat: add bcrypt cost parameter to hash-password * revert: typos * refactor: take the cost out of interface * fix: default bcrypt cost to 14 * fix: follow bcrypt library for min and max cost * doc: mention defaultBcryptCost in cost parameter description * chore: gci format * fix: more specific bcrypt cost algorithm flag * feat: bcrypt cost provisioning * Revert "feat: bcrypt cost provisioning" This reverts commit e09d4bd036e7657588ed7785afd2c5388b29fb2a. * chore: gci format * chore: gci format * chore: gci format * chore: golangcilint fmted --------- Co-authored-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-08-11 14:26:18 +03:00
Francis Lavoie	30d63648f5	caddyauth: Drop support for scrypt (#6091)	2024-02-12 19:33:54 +00:00
Jacob Gadikian	d6f86cccf5	ci: use gci linter (#5708) ... * use gofmput to format code * use gci to format imports * reconfigure gci * linter autofixes * rearrange imports a little * export GOOS=windows golangci-lint run ./... --fix	2023-08-14 09:41:15 -06:00
Francis Lavoie	9e6919550b	cmd: Expand cobra support, add short flags (#5379) ... * cmd: Expand cobra support * Convert commands to cobra, add short flags * Fix version command typo Co-authored-by: Emily Lange <git@indeednotjames.com> * Apply suggestions from code review Co-authored-by: Matt Holt <mholt@users.noreply.github.com> --------- Co-authored-by: Emily Lange <git@indeednotjames.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2023-02-24 16:09:12 -07:00
Francis Lavoie	6e3063b15a	caddyauth: Speed up basicauth provision, deprecate scrypt (#4720) ... * caddyauth: Speed up basicauth provisioning, precalculate fake password * Deprecate scrypt, allow using decoded bcrypt hashes * Add TODO note Co-authored-by: Matt Holt <mholt@users.noreply.github.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2022-09-05 13:32:58 -06:00
Simão Gomes Viana	1c8ea00828	go.mod: Migrate to golang.org/x/term (#4073) ... golang.org/x/crypto/ssh/terminal is deprecated in favor of golang.org/x/term See https://github.com/caddyserver/caddy/pull/4073/checks?check_run_id=2152150495 Error: SA1019: package golang.org/x/crypto/ssh/terminal is deprecated: this package moved to golang.org/x/term. (staticcheck) See https://github.com/caddyserver/caddy/pull/4073/checks?check_run_id=2152228516 Error: SA1019: package golang.org/x/crypto/ssh/terminal is deprecated: this package moved to golang.org/x/term. (staticcheck) Test: go test -count=1 './...'	2021-03-29 12:39:08 -06:00
Cuong Manh Le	4cff36d731	caddyauth: Use buffered channel passed to signal.Notify (#3895) ... The docs at os/signal.Notify warn about this signal delivery loss bug at https://golang.org/pkg/os/signal/#Notify, which says: Package signal will not block sending to c: the caller must ensure that c has sufficient buffer space to keep up with the expected signal rate. For a channel used for notification of just one signal value, a buffer of size 1 is sufficient. Caught by a static analysis tool from Orijtech, Inc. called "sigchanyzer"	2020-12-01 08:27:46 -07:00
Matthew Holt	937ec34201	caddyauth: Prevent user enumeration by timing ... Always follow the code path of hashing and comparing a plaintext password even if the account is not found by the given username; this ensures that similar CPU cycles are spent for both valid and invalid usernames. Thanks to @tylerlm for helping and looking into this!	2020-10-31 10:51:05 -06:00
Matthew Holt	8a0fff58aa	caddyauth: hash-password: Set bcrypt cost to 14 (#3580)	2020-07-17 12:20:53 -06:00
Francis Lavoie	bb67e19d7b	cmd: hash-password: Fix broken terminal state on SIGINT (#3416) ... * caddyauth: Fix hash-password broken terminal state on SIGINT * caddycmd: Move TrapSignals calls to only subcommands that run long	2020-05-21 13:09:49 -06:00
Andrew Zhou	5bde8d705b	cmd: hash-password: Support reading from stdin (#3373) ... Closes #3365 * http: Add support in hash-password for reading from terminals/stdin * FIXUP: Run gofmt -s * FIXUP * FIXUP: Apply suggestions from code review Co-authored-by: Matt Holt <mholt@users.noreply.github.com> * FIXUP Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2020-05-11 14:10:47 -06:00
Mohammed Al Sahaf	7dfd69cdc5	chore: make the linter happier (#3245) ... * chore: make the linter happier * chore: remove reference to maligned linter in .golangci.yml	2020-04-08 15:31:51 -06:00
Matthew Holt	442fd748f6	caddyhttp: Minor cleanup and fix nil pointer deref in caddyfile adapter	2019-10-28 15:08:45 -06:00
Matthew Holt	f8366c2f09	http: authentication module; hash-password cmd; http_basic provider ... This implements HTTP basicauth into Caddy 2. The basic auth module will not work with passwords that are not securely hashed, so a subcommand hash-password was added to make it convenient to produce those hashes. Also included is Caddyfile support. Closes #2747.	2019-10-10 14:37:27 -06:00