Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-10-14 | properly treat utf8 chars in password | Azul | |
utf-8 encoding used to be bundled with the SHA256 library. However we only want to utf8 encode strings that are actual user input. We do not want to encode the bytearrays that are used when hashing the hex values calculated during for SRP. So I separated the utf-8 encoding and the sha256 hashing. | |||
2013-09-24 | use token from the form to submit password update | Azul | |
2013-07-12 | also zeroprefix the salt if needed | Azul | |
Now what else can you possibly zeroprefix? This should be it - shouldn't it? | |||
2013-07-12 | prefix incoming B too | Azul | |
2013-07-12 | also prefix our own toString(16) hex values | Azul | |
2013-07-12 | the 0 prefix in hex is essential for building the M and M2 strings | Azul | |
2013-07-04 | always use the API-only controller for all requests. | elijah | |
2013-06-24 | refactor: separate account from session | Azul | |
2013-06-24 | refactor: rename constants to calculate and clean up hash usage | Azul | |
2013-06-24 | refactor: separate calculations from session | Azul | |
2013-06-24 | fix bug wrt zero padding of hashes | Azul | |
2013-03-20 | use a proper random a for the handshake | Azul | |
2012-11-26 | API: update instead of addToForm | Azul | |
addToForm was an attempt to not use ajax but just the normal form submit. Turns out it's easy to add hidden fields to the form but quite cumbersome to remove the password fields from teh form so they are not submitted over the eventually untrusted channel. So we use ajax for updates just like for signup. | |||
2012-11-23 | addToForm: add the srp signup data to an existing form | Azul | |
2012-11-22 | don't cache password and login | Azul | |
2012-11-22 | catch empty responses | Azul | |
2012-11-22 | using done/fail instead of success/error, handing all properties to fail | Azul | |
2012-11-20 | all request should go to absolute paths | Azul | |
They should be independent of the url we're serving the page from | |||
2012-11-20 | make sure we get the current password and login | Azul | |
2012-11-20 | make sure srp.login also works as a callback | Azul | |
2012-11-20 | sending the parsed json object to the error handler | Azul | |
2012-11-19 | further cleanup | Azul | |
2012-11-19 | removed the SRP class - using just a plain srp object now | Azul | |
2012-11-19 | first step at cleaning up the srp | Azul | |
2012-11-19 | works - but not quite what i want. Exposing jqXHR to error function | Azul | |
2012-11-14 | cleaned up unused parser functions | Azul | |
2012-11-14 | removed outdated django remote and all related files | Azul | |
Also cleaned up the specs a bit | |||
2012-11-09 | Merge branch 'master' into feature-updated_json_api | Azul | |
2012-10-30 | we're expecting json responses - so put .json in the url | Azul | |
2012-10-19 | don't expect create to return an ok | Azul | |
* it returns the user * it will return errors if sth. goes wrong. | |||
2012-10-19 | added success and error callbacks to register | Azul | |
2012-10-17 | hand success and error messages to identify by default | Azul | |
also cleaned up some other parts that were not needed anymore | |||
2012-10-16 | use M2 as the key for the server auth | Azul | |
2012-10-16 | not caching x,V,salt to avoid conflicts | Azul | |
2012-10-16 | added unit tests for session calculations | Azul | |
2012-10-15 | expecting the salt to be send with key salt | Azul | |
2012-10-15 | all rest tests passing, using proper verbs | Azul | |
2012-10-14 | calculating the right M and M2! | Azul | |
still missing some error handling, this in Django specs and the right http verbs | |||
2012-10-14 | got SRP v6a test setup and basic rest flow to work | Azul | |
* still need to fix the algo for auth * Also need to get the http verbs right | |||
2012-10-12 | got signup to work in accordance with py srp | Azul | |
2012-10-02 | using jquery for signup post now. login still pending | Azul | |
2012-08-21 | first round of making jslint happy | Azul | |
2012-08-21 | moved srp-js files from lib to src | Azul | |
2012-07-20 | added an index file to use with sprockets | Azul | |
2012-07-20 | INCOMPATIBLE: major restructuring of the repository | Azul | |
* removed Django code - we're keeping the tests - so I hope the two can still be used together * removed js packer - everyone has their own packaging strategy these days * cleaned up the repository - we only have js so javascript directory does not make much sense |