projects / authserver.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ac44275) | patch
actually use the on-disk site-specific nonce to 'pepper' passwords before hashing...
authorRobert Kaiser <kairo@kairo.at>
Wed, 26 Oct 2016 23:49:06 +0000 (01:49 +0200)
committerRobert Kaiser <kairo@kairo.at>
Wed, 26 Oct 2016 23:49:06 +0000 (01:49 +0200)
commit087085d618e57aea5f292a5bb57d46304574cc6a
treeddad375a9081377e4765f566decbb23b63731f85tree | snapshot
parentac442755b476ec15b269be0d6a6c68e5080a6b21commit | diff
actually use the on-disk site-specific nonce to 'pepper' passwords before hashing so that stealing the database won't even reveal weak passwords
authsystem.inc.php diff | blob | blame | history
authutils.php-class diff | blob | blame | history
OAuth2-capable authorization/login server