Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[stable23] Handle one time and large passwords #33443

Merged
merged 1 commit into from
Aug 4, 2022

Conversation

backportbot-nextcloud[bot]
Copy link

@backportbot-nextcloud backportbot-nextcloud bot commented Aug 3, 2022

⚠️ This backport had conflicts and is incomplete ⚠️

backport of #33407

@backportbot-nextcloud backportbot-nextcloud bot added this to the Nextcloud 23.0.8 milestone Aug 3, 2022
@PVince81 PVince81 changed the title [stable23] [stable24] Handle one time and large passwords [stable23] Handle one time and large passwords Aug 3, 2022
@blizzz blizzz mentioned this pull request Aug 3, 2022
@blizzz blizzz added the 2. developing Work in progress label Aug 3, 2022
@blizzz
Copy link
Member

blizzz commented Aug 3, 2022

@CarlSchwan backport incomplete

@CarlSchwan CarlSchwan force-pushed the backport/33407/stable23 branch from 56c7e4a to c11675a Compare August 3, 2022 09:38
For passwords bigger than 250 characters, use a bigger key since the
performance impact is minor (around one second to encrypt the password).

For passwords bigger than 470 characters, give up earlier and throw
exeception recommanding admin to either enable the previously enabled
configuration or use smaller passwords.

This adds an option to disable storing passwords in the database. This
might be desirable when using single use token as passwords or very
large passwords.

Signed-off-by: Carl Schwan <[email protected]>
@CarlSchwan CarlSchwan force-pushed the backport/33407/stable23 branch from c11675a to bc29ff5 Compare August 3, 2022 11:50
@CarlSchwan CarlSchwan added 3. to review Waiting for reviews and removed 2. developing Work in progress labels Aug 4, 2022
@blizzz blizzz merged commit d7c442d into stable23 Aug 4, 2022
@blizzz blizzz deleted the backport/33407/stable23 branch August 4, 2022 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. to review Waiting for reviews
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants