ace/Source/ACE.Database.Tests
zegegerslittlesis cac4ea9e16 Update account authentication to use BCrypt. (#1468)
* Update account authentication to use BCrypt.

This updates account authentication to use the BCrypt hashing algorithm in place of SHA512 and the need for a separate password salt.

Bcrypt is also more secure since it uses a "Work Factor" to discourage password brute force attacks and the implementaition is much cleaner overall since the salt is randomly generated and added as part of the password hash itself, effectively protecting against rainbow table attacks.

The default WorkFactor is set to 10 which is the considered the current industry standard. A server owner can easily increase this value to whatever level of security they desire which in turn will make password verification slower and much harder to crack if ever brute forced by a hacker.

Furthermore, BCrypt is used in PHP's passwordHash() function so this change will open up some more account management possibilities through PHP registration scripts, especially CMS's and database bridging.

* Update AuthDbContext.cs

* Add Update script for Auth database

* Update Account / AuthDb for in-place migrations

* Fix a whitespace error

* Add 'passwd' and 'set-accountpassword' commands

* Update changelog

* Update AuthenticationBase.sql

Revert Auth Base to previous commit

* Update changelog.md
2019-03-08 13:41:23 -06:00
..
AccountTests.cs Update account authentication to use BCrypt. (#1468) 2019-03-08 13:41:23 -06:00
ACE.Database.Tests.csproj Update appveyor.yml for tests (#1114) 2018-12-04 00:26:05 -05:00
WeenieSearchTests.cs Configuration file change from JSON to JavaScript (#1404) 2019-02-16 16:27:46 -05:00