Add ability to store securely hashed sessionkeys - #47

Open

wwhipple wants to merge 13 commits into

freeside:FREESIDE_4_BRANCHfrom

wwhipple:feature/hash-sessionkey

Commits on Jul 30, 2015

Freeside sessionkey Should Not Be Stored in Plaintext
Weldon Whipple
committed
8e16e00

Commits on Aug 6, 2015

Add overlooked line that mentions the $conf_hashsalt in install_callback
Weldon Whipple
committed
72153e6
Add overlooked $conf_hashsalt in callback
Weldon Whipple
committed
fd8e7f1

Commits on Aug 12, 2015

Merge branch 'feature/hash-sessionkey' of https://github.com/wwhipple/Freeside into feature/hash-sessionkey
wwhipple
committed
64463ff
Remove salted hash from FS::Record's update method. (The field passed
Weldon Whipple
committed
78a3ea0

Commits on Dec 10, 2015

Merge branch 'feature/hash-sessionkey' of https://github.com/wwhipple/Freeside into feature/hash-sessionkey
wwhipple
committed
5d60a40

Commits on Dec 14, 2015

In FS::Record, use sha512_hex for sessionkey
wwhipple
committed
d9fd356
In access_user_session table, expand sessionkey to 128 (from 80)
wwhipple
committed
1a08a4b
Generate initial hashsalt (for sessionkeys) if it doesn't exist already
wwhipple
committed
dc83c64
Return t/Record.t back to its original content
wwhipple
committed
4da342c
Modified FS::Conf description to state that changing the salt will
wwhipple
committed
55d7f62
Fix typo in comment
wwhipple
committed
a2eaeff

Commits on Dec 15, 2015

Tweak description of hashsalt in FS::Conf
wwhipple
committed
fd0c91d