summaryrefslogtreecommitdiff
path: root/src/srp_session.js
AgeCommit message (Collapse)Author
2015-09-17Allow extra signup params from accountkaeff
For the feature/invite-codes in leap_web, we need to be able to pass an extra parameter (the invite code) from the signup form to the server. This approach allows the consumer of SRP to specify a custom implementation of Account that returns arbitrary `loginParams`, and Session will pass them on so that they become part of the XHR. - Split session.signup into signup and update to restrict extra params to signup only
2013-07-12also zeroprefix the salt if neededAzul
Now what else can you possibly zeroprefix? This should be it - shouldn't it?
2013-07-12prefix incoming B tooAzul
2013-07-04always use the API-only controller for all requests.elijah
2013-06-24refactor: separate account from sessionAzul
2013-06-24refactor: rename constants to calculate and clean up hash usageAzul
2013-06-24refactor: separate calculations from sessionAzul
2013-06-24fix bug wrt zero padding of hashesAzul
2013-03-20use a proper random a for the handshakeAzul
2012-11-22don't cache password and loginAzul
2012-11-20make sure we get the current password and loginAzul
2012-11-19further cleanupAzul
2012-11-19removed the SRP class - using just a plain srp object nowAzul
2012-10-16use M2 as the key for the server authAzul
2012-10-16not caching x,V,salt to avoid conflictsAzul
2012-10-16added unit tests for session calculationsAzul
2012-10-14calculating the right M and M2!Azul
still missing some error handling, this in Django specs and the right http verbs
2012-10-12got signup to work in accordance with py srpAzul
2012-08-21moved srp-js files from lib to srcAzul