LogalDeveloper/owncast
0
Fork 0
Code Activity

sha-512 hash passwords longer than 72 bytes (#4331)

Browse Source 
* sha-512 hash passwords longer than 72 bytes

* rename compress_hashing to go conventions

* add api test for long passwords

* fix typo

* chore(test): add unit test for password hashing

---------

Co-authored-by: Gabe Kangas <gabek@real-ity.com>
This commit is contained in:
mahmed2000
2025-10-13 15:05:42 -07:00
committed by GitHub
co-authored by Gabe Kangas
parent 4e0becc2e0
commit f30b80d473
5 changed files with 369 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
webserver/router/middleware/auth.go
+1 -1
View File
@@ -43,7 +43,7 @@ func RequireAdminAuth(handler http.HandlerFunc) http.HandlerFunc {
user, pass, ok := r.BasicAuth()
// Failed
if !ok || subtle.ConstantTimeCompare([]byte(user), []byte(username)) != 1 || utils.ComparseHash(password, pass) != nil {
if !ok || subtle.ConstantTimeCompare([]byte(user), []byte(username)) != 1 || utils.CompareHash(password, pass) != nil {
w.Header().Set("WWW-Authenticate", `Basic realm="`+realm+`"`)
http.Error(w, "Unauthorized", http.StatusUnauthorized)
log.Debugln("Failed admin authentication")