nodebb/test
Julian Lam 512f6de6de
feat: allow passwords with length > 73 characters ()
* feat: allow passwords longer than 73 characters

Context: A bcrypt/blowfish limitation means that password length is capped at 72 characters. We can get around this without compromising on security
by hashing all incoming passwords with SHA512, and then sending that to bcrypt.

https://dropbox.tech/security/how-dropbox-securely-stores-your-passwords

* feat: add additional test for passwords > 73 chars

* fix: remove 'password-too-long' error message and all invocations

* test: added test to show that a super long password won't bring down NodeBB

* fix: remove debug log

* Revert "fix: remove 'password-too-long' error message and all invocations"

This reverts commit 1e312bf7ef7e119fa0f1bd3517d756ca013d5e79.

* fix: added back password length checks, but at 512 chars

As processing a large string still uses a lot of memory
..
database fix: redis hget
files fix: , remove webfonts ()
helpers fix: vulnerability in cover and admin uploads ()
mocks chore: add info log into tests
.eslintrc ESlint no-unused-vars
api.js fix: breaking test from 0db0231cff
authentication.js fix(writeapi): tests
batch.js Async refactor in place ()
blacklist.js fix(deps): update to eslint@6
build.js Remove sounds ()
categories.js fix: missing await
controllers-admin.js Admin/users ()
controllers.js refactor: setupApiRoute signature
coverPhoto.js fix:
database.js fix: db info page
defer-logger.js upgrade to winston 3.1, closes ()
emailer.js fixed tests, closes
feeds.js feat: add privilege give/rescind hooks ()
file.js fix: vulnerability in cover and admin uploads ()
flags.js feat: additional tests for
groups.js fix: allow admins adding users to global moderators
image.js up deps
locale-detect.js fix: , autoLocale logic not playing nicely with no-refresh auths ()
messaging.js feat: option in ACP to configure notification/email delay for chats
meta.js Remove sounds ()
notifications.js fix: tests
package-install.js fix: , remove old deps during upgrade ()
pagination.js ESlint object-curly-spacing
password.js feat: allow passwords with length > 73 characters ()
plugins-installed.js feat: move plugin tests to separate file
plugins.js Revert "fix: bypass nbbpm for now"
posts.js feat: edit test
pubsub.js fix:
rewards.js fix: change params
search-admin.js style(eslint): match operator-linebreak preferences
search.js feat: add privilege give/rescind hooks ()
settings.js more settings tests
socket.io.js refactor: move groups.leave, fix some tests
template-helpers.js feat: more discrete commit-on-save instead of commit-on-change w/ confirm modals ()
topics.js feat: , min/max tags per category
translator.js fix: ()
upgrade.js feat: force upgrade scripts for test
uploads.js Remove sounds ()
user.js feat: allow passwords with length > 73 characters ()
utils.js feat: add checkbox tests