distribution/registry/handlers
Stephen J Day ffd3662982 Harden basic auth implementation
After consideration, the basic authentication implementation has been
simplified to only support bcrypt entries in an htpasswd file. This greatly
increases the security of the implementation by reducing the possibility of
timing attacks and other problems trying to detect the password hash type.

Also, the htpasswd file is only parsed at startup, ensuring that the file can
be edited and not effect ongoing requests. Newly added passwords take effect on
restart. Subsequently, password hash entries are now stored in a map.

Test cases have been modified accordingly.

Signed-off-by: Stephen J Day <stephen.day@docker.com>
2015-06-10 19:38:56 -07:00
..
api_test.go Refactor specification of supported digests 2015-05-22 18:08:23 -07:00
app.go Harden basic auth implementation 2015-06-10 19:38:56 -07:00
app_test.go Decouple redis dependency from blob descriptor cache 2015-05-20 18:58:10 -07:00
basicauth.go Move registry package into handler package 2015-02-10 17:25:40 -08:00
basicauth_prego14.go Move registry package into handler package 2015-02-10 17:25:40 -08:00
blob.go Refactor Blob Service API 2015-05-15 17:05:18 -07:00
blobupload.go Refactor Blob Service API 2015-05-15 17:05:18 -07:00
context.go Instantiate http context before dispatch 2015-04-15 19:53:36 -07:00
helpers.go Move registry package into handler package 2015-02-10 17:25:40 -08:00
hmac.go Refactor Blob Service API 2015-05-15 17:05:18 -07:00
hmac_test.go Refactor Blob Service API 2015-05-15 17:05:18 -07:00
hooks.go Feature: Web Panic Reporting via hooks 2015-05-31 14:21:22 +00:00
images.go Refactor Blob Service API 2015-05-15 17:05:18 -07:00
mail.go Feature: Web Panic Reporting via hooks 2015-05-31 14:21:22 +00:00
tags.go Add error return to Repository method on Registry 2015-02-13 16:27:33 -08:00