Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | use SecretKey for key material in crypto | pennae | 2022-07-17 | 4 | -53/+58 |
| | |||||
* | use HawkKey everywhere hawk keys are handled | pennae | 2022-07-17 | 6 | -85/+44 |
| | | | | the db already does this, crypto did not. | ||||
* | add dedicated types for all the tokens | pennae | 2022-07-17 | 6 | -84/+175 |
| | | | | using SecretBytes for all of them isn't that great. | ||||
* | make crypto fields private if they're not used outside crypto | pennae | 2022-07-17 | 1 | -7/+7 |
| | |||||
* | don't use SecretBytes in HawkKey/SecretKey | pennae | 2022-07-17 | 5 | -33/+37 |
| | |||||
* | remove zeroize dependency | pennae | 2022-07-17 | 3 | -10/+1 |
| | | | | | | | | this is not so much a problem as a possible source of false security for the readers. all secret keys we handle are serialized in some form, and those serialization buffers are *not* zeroed out after use. zeroing our raw buffers doesn't help much in that case, using a zero-on-free allocator would be much more helpful. | ||||
* | remove remnants of trying to quickcheck things | pennae | 2022-07-17 | 1 | -4/+0 |
| | | | | it never worked out, but a bit of support stuff remained. | ||||
* | apply rustfmt | pennae | 2022-07-17 | 4 | -4/+8 |
| | |||||
* | fix clippy warnings | pennae | 2022-07-17 | 4 | -4/+6 |
| | |||||
* | add test vector for password changes and account reset | pennae | 2022-07-16 | 1 | -1/+48 |
| | | | | | | | these are not "official" test vectors, just an example of what the implementation does currently. since it works with other parts of the ecosystem (most importantly firefox itself) they seem good enough to include. | ||||
* | allow integration tests to run in parallel | pennae | 2022-07-14 | 8 | -56/+77 |
| | | | | | this doesn't do much for performance, but it does allow running the tests with a simple `cargo t`. | ||||
* | simplify spawn_logged | pennae | 2022-07-14 | 1 | -23/+7 |
| | |||||
* | xfail a test the last commit broke | pennae | 2022-07-14 | 1 | -0/+1 |
| | |||||
* | keep oauth tokens around a bit after expiry | pennae | 2022-07-13 | 4 | -16/+27 |
| | | | | | | | firefox wants to delete profile access tokens after they're expired and logs errors if it can't do that. since this happens every hour we can end up with a bunch of error logs very quickly, so we better let it do what it wants. | ||||
* | add downgrade migration for first schema version | pennae | 2022-07-13 | 1 | -1/+44 |
| | |||||
* | fix avatar change showing an error and not reloading the page | pennae | 2022-07-13 | 1 | -0/+1 |
| | |||||
* | initial import | pennae | 2022-07-13 | 62 | -0/+16966 |