Commit graph

11 commits

Author SHA1 Message Date
Ty Conner
453489f548
Delete 2019-06-10-00-Add_Fields_To_Account_Table.sql 2019-11-19 23:42:42 -05:00
Ty Conner
3fc219e811
Add Creation/LastLogin IP/DateTime (#1985)
* Create 2019-06-10-00-Add_Fields_To_Account_Table.sql

* Scaffold new Account fields

* Add support for Create/LastLogin IP/DateTime

* Add CreateTime, CreateIP, LastLoginTime, LastLoginIp to finger output

* Update 2019-06-10-00-Add_Fields_To_Account_Table.sql

* update scaffolding

* changes as discussed

* BannedByAccountId

* sql changes as discussed

* update output

* Update AdminCommands.cs

* Update changelog.md
2019-07-06 16:12:24 -05:00
Ty Conner
4f751f2f41
Rebase SQL files (#1827) 2019-04-29 04:56:33 -05:00
zegegerslittlesis
cac4ea9e16 Update account authentication to use BCrypt. (#1468)
* Update account authentication to use BCrypt.

This updates account authentication to use the BCrypt hashing algorithm in place of SHA512 and the need for a separate password salt.

Bcrypt is also more secure since it uses a "Work Factor" to discourage password brute force attacks and the implementaition is much cleaner overall since the salt is randomly generated and added as part of the password hash itself, effectively protecting against rainbow table attacks.

The default WorkFactor is set to 10 which is the considered the current industry standard. A server owner can easily increase this value to whatever level of security they desire which in turn will make password verification slower and much harder to crack if ever brute forced by a hacker.

Furthermore, BCrypt is used in PHP's passwordHash() function so this change will open up some more account management possibilities through PHP registration scripts, especially CMS's and database bridging.

* Update AuthDbContext.cs

* Add Update script for Auth database

* Update Account / AuthDb for in-place migrations

* Fix a whitespace error

* Add 'passwd' and 'set-accountpassword' commands

* Update changelog

* Update AuthenticationBase.sql

Revert Auth Base to previous commit

* Update changelog.md
2019-03-08 13:41:23 -06:00
Ty Conner
e83ce1fce3
Rebased SQL scripts (#608) 2018-01-29 11:58:42 -06:00
Ty Conner
6820723ebb Remove API and SecureAuth (#604)
* Remove API and SecureAuth

* Fix up some issues

* might need to rem this

* more clean up

* hmm

* Cleanup

* busted test

* remove debug code

* Add a few tests to simple verify AuthDB can create accounts and change accesslevel

* update test for security purpose

* more cleanup

* and more

* Remove leftover usermodified

* Update changelog.md

* Kill Random weenie search for now
2018-01-28 06:46:15 -06:00
Ty Conner
ef62342eab
Convert PropertyInt properties from uint to int (#559)
* Update EmoteCategory, EmoteType and SpellType enums

* Add CombatStyle enum

* Rebase SQL scripts

* Change uint to int in SQL

* Adjust SpellType

* Changed all PropertyInt properties from uint to int

* Some CombatStance work + StyleCop clean up

* Update README

* Updated ACE-World requirement and appveyor
2017-11-01 13:53:08 -04:00
Mogwai-TheFurry
610c2d0573 Authentication overhaul and API start (#543)
* WIP

* WIP - MVC app for weenie editor with auth overhaul in place

* removed redundant project

* more WIP.  commiting to rebase

* WIP.  API works, auth partially tied in, swagger works, api host works

* moved auth to a post with a body instead of get

* WIP.  auth fully works.  swagger UI supports auth model.

* added easier auth attribute, updated existing methods for consistency.  should PR this after a couple more hours

* stylecop cleanups

* WIP. commiting to get help with session and connection issues

* forgot to save some changes to a sql script

* got all the login issues squared away.  new auth system is done.

* WIP. getting an out of memory exception i cant track down

* WIP.  PacketInboundLoginRequets reads the JwtToken with 2 bonus (invalid) prepended characters

* updated ReadString32L to suck a little less.  i dont think this is 100% correct though.

* Authentication overhaul complete, APIs begun to support content editing

* appveyor cleanup

* appveyor cleanup, take 2

* appveyor cleanup, take 3

* appveyor cleanup, take 4

* Rename 2017-10-20-auth-overhaul.sql to 2017-10-20-00-auth-overhaul.sql

* Rename 2017-10-20-auth-overhaul-shard.sql to 2017-10-20-00-auth-overhaul-shard.sql

* Rename 2017-10-20-auth-overhaul-world.sql to 2017-10-20-00-auth-overhaul-world.sql

* Update MySqlInstall.bat
2017-10-21 13:32:06 -04:00
Mogwai-AC
9e1ffc0346 AppVeyor 2017-04-04 15:25:30 -04:00
Ty Conner
9bce0b89ca Added accesslevel table, inserted data into table and altered account table to add accesslevel column. 2017-02-18 14:48:54 -05:00
Rawaho
239c75d625 Initial database support, transaction support will come later. 2017-01-19 14:14:48 +13:00