This implements a comment from Luzifer/cloudkeys-go#17 in order not to
have to change the `config.go` when deploying
Signed-off-by: Knut Ahlers <knut@ahlers.me>
commit f0db1ff1f8
Author: Knut Ahlers <knut@ahlers.me>
Date: Sun Dec 24 12:19:56 2017 +0100
Mark option as deprecated
Signed-off-by: Knut Ahlers <knut@ahlers.me>
commit 9891df2a16
Author: Knut Ahlers <knut@ahlers.me>
Date: Sun Dec 24 12:11:56 2017 +0100
Fix: Typo
Signed-off-by: Knut Ahlers <knut@ahlers.me>
commit 836006de64
Author: Knut Ahlers <knut@ahlers.me>
Date: Sun Dec 24 12:04:20 2017 +0100
Add new dependencies
Signed-off-by: Knut Ahlers <knut@ahlers.me>
commit d64fee60c8
Author: Knut Ahlers <knut@ahlers.me>
Date: Sun Dec 24 11:55:52 2017 +0100
Replace insecure password hashing
Prior this commit passwords were hashed with a static salt and using the
SHA1 hashing function. This could lead to passwords being attackable in
case someone gets access to the raw data stored inside the database.
This commit introduces password hashing using bcrypt hashing function
which addresses this issue.
Old passwords are not automatically re-hashed as they are unknown.
Replacing the old password scheme is not that easy and needs #10 to be
solved. Therefore the old hashing scheme is kept for compatibility
reason.
Signed-off-by: Knut Ahlers <knut@ahlers.me>
Signed-off-by: Knut Ahlers <knut@ahlers.me>
closes#14closes#15
