Skip to content

Navigation Menu

Explore
By company size
By use case
By industry
View all solutions
Topics
- AI
- DevOps
- Security
- Software Development
- View all
Explore
- GitHub Sponsors
  Fund open source developers
- The ReadME Project
  GitHub community articles
Repositories
- Enterprise platform
  AI-powered developer platform
Available add-ons
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Sign up

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

coder / code-server Public

Notifications You must be signed in to change notification settings
Fork 5.9k
Star 71.4k

Code
Issues 147
Pull requests 6
Discussions
Actions
Projects
Security
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security
Insights

fix: use sufficient computational effort for password hash#3422

Merged

jsjoeio merged 27 commits intomaincoder/code-server:mainfrom

jsjoeio/fix-password-hashcoder/code-server:jsjoeio/fix-password-hashCopy head branch name to clipboard

Jun 9, 2021

Conversation Commits27 (27)Checks Files changed

Commits

Commits on Jun 8, 2021

chore: update CHANGELOG
jsjoeio
committed
refactor: use bcrypt in hash function
jsjoeio
committed
refactor: use bcrypt in e2e setup
jsjoeio
committed
feat: add unit test for hash function
jsjoeio
committed
refactor: add functions to check hash password
jsjoeio
committed
feat: add tests using real hashes
jsjoeio
committed
chore: add argon2 package
jsjoeio
committed
chore: update to argon2 in test
jsjoeio
committed
refactor: use argon2 instead of bcrypt
jsjoeio
committed
refactor: update unit tests for hash fns
jsjoeio
committed
refactor: update login logic with new async hashing
jsjoeio
committed
refactor: make authenticated async everywhere
jsjoeio
committed
refactor: make ensureAuthenticated async
jsjoeio
committed
refactor: make wsProxy async
jsjoeio
committed
refactor: update hash fn in test config
jsjoeio
committed
feat: update cli and test for hashed-password
jsjoeio
committed
feat: add getPasswordMethod & test for it
jsjoeio
committed
feat: add handlePasswordValidation + tests
jsjoeio
committed
refactor: rewrite password logic at /login
jsjoeio
committed
feat: add isCookieValid function and tests
jsjoeio
committed
refactor: password logic in http w/ isCookieValid
jsjoeio
committed
docs: update FAQ with new hashing instructions
jsjoeio
committed
feat: add splitOnFirstEquals function
jsjoeio
committed
refactor: parse options with multiple = in cli
jsjoeio
committed
feat: add npm_config_build_from_source to build scripts
jsjoeio
committed
fix: sanitize password and cookie key
jsjoeio
committed
feat: check for empty str in isHashMatch
jsjoeio
committed

Footer

© 2025 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Docs
Contact

You can’t perform that action at this time.