mirror of
https://github.com/GreptimeTeam/greptimedb.git
synced 2026-07-10 16:00:43 +00:00
ab552e24b5
* feat: add password verifier formats Signed-off-by: Dennis Zhuang <killme2008@gmail.com> * fix: harden password verifier parsing and auth config errors - Reject pbkdf2_sha256 verifiers whose hash is not 32 bytes and bound the salt length, preventing short-hash verifiers from matching on a prefix. - Verify pbkdf2_sha256 with a stack-allocated buffer. - Report only the length, not the bytes, when a mysql native password verifier has an illegal length. - Map empty frontend_auth credentials to an invalid-config error instead of an internal error. Signed-off-by: Dennis Zhuang <killme2008@gmail.com> * chore: update config.md Signed-off-by: Dennis Zhuang <killme2008@gmail.com> * fix: skip non-plain verifiers in get_one_user_pwd Pick the first plain-text credential instead of failing when the first user happens to hold a hashed verifier. Signed-off-by: Dennis Zhuang <killme2008@gmail.com> * fix: format Signed-off-by: Dennis Zhuang <killme2008@gmail.com> * chore: remove unused get_one_user_pwd Internal flownode-to-frontend communication no longer authenticates (see #8244), so the plain-text credential export path is dead code. Drop get_one_user_pwd, its now-orphan as_plain_text helper, and the related tests. Signed-off-by: Dennis Zhuang <killme2008@gmail.com> --------- Signed-off-by: Dennis Zhuang <killme2008@gmail.com>
34 lines
600 B
TOML
34 lines
600 B
TOML
[package]
|
|
name = "auth"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
|
|
[features]
|
|
default = []
|
|
testing = []
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
api.workspace = true
|
|
async-trait.workspace = true
|
|
common-base.workspace = true
|
|
common-config.workspace = true
|
|
common-error.workspace = true
|
|
common-macro.workspace = true
|
|
common-telemetry.workspace = true
|
|
digest = "0.10"
|
|
hex.workspace = true
|
|
pbkdf2 = "0.12"
|
|
sha1 = "0.10"
|
|
sha2 = "0.10"
|
|
snafu.workspace = true
|
|
sql.workspace = true
|
|
subtle = "2.6"
|
|
tokio.workspace = true
|
|
|
|
[dev-dependencies]
|
|
common-test-util.workspace = true
|