cccms/lib/authentication.rb, branch erdgeist-modernize-auth [no description] https://erdgeist.org/gitweb/cccms/atom?h=erdgeist-modernize-auth 2026-07-16T17:45:42Z Implement transparent password hash migration 2026-07-16T17:45:42Z erdgeist erdgeist@erdgeist.org 2026-07-16T17:45:42Z urn:sha1:220ed6c7914f5977d36b7617e9c38999317f57e5 Add has_secure_password and bcrypt while retaining compatibility with legacy SHA-1 password hashes. Existing users are upgraded to password_digest on their next successful login. Add regression tests covering both legacy and modern authentication paths. Use SecureRandom instead of the hand rolled implementation 2026-07-16T16:28:52Z erdgeist erdgeist@erdgeist.org 2026-07-16T16:28:52Z urn:sha1:79eaaa68dd5380d3572ed48e32e556531bfd49eb * initial commit of the stripped restful-authentication 2009-02-15T19:22:01Z simon simon@zagal.(none) 2009-02-08T22:15:11Z urn:sha1:9f94a70c3e3d9bf766cb9663b0a904d30a190d85 * http basic auth and login from cookie have been removed * no it does not work yet, it's so f*cking secure, it won't even let legitimate users login