nextcloud/lib/private/Authentication
Carl Schwan f4795f6dac
Handle one time and large passwords
For passwords bigger than 250 characters, use a bigger key since the
performance impact is minor (around one second to encrypt the password).

For passwords bigger than 470 characters, give up earlier and throw
exeception recommanding admin to either enable the previously enabled
configuration or use smaller passwords.

This adds an option to disable storing passwords in the database. This
might be desirable when using single use token as passwords or very
large passwords.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2022-07-29 16:15:38 +02:00
..
Events Update php licenses 2021-06-04 22:02:41 +02:00
Exceptions Update php licenses 2021-06-04 22:02:41 +02:00
Listeners remove storage wrappers when deleting the user storage 2022-06-10 15:40:22 +00:00
Login Update php licenses 2021-06-04 22:02:41 +02:00
LoginCredentials Fix replacing external storage password during debug log 2022-06-13 06:18:18 +00:00
Notifications Update php licenses 2021-06-04 22:02:41 +02:00
Token Handle one time and large passwords 2022-07-29 16:15:38 +02:00
TwoFactorAuth Only check the twofactor state once per request 2021-12-01 17:56:30 +01:00
WebAuthn Properly cleanup entries of WebAuthn on user deletion 2021-06-18 09:42:32 +02:00