caddy/modules/caddyhttp/caddyauth
Jay Hemnani be5fba4ff2
caddyauth: handle CRLF and unterminated hash-password input (#8227)
A password piped with a Windows line ending was hashed with the trailing
\r, so basic_auth rejected the real password, and input without a final
newline failed with EOF.
2026-10-16 22:29:54 +10:00
..
argon2id.go basicauth: Implement argon2id (#7186) 2025-10-06 17:27:06 -06:00
basicauth.go caddyauth: only replace known placeholders in basic auth credentials (#8017) 2026-09-26 18:52:53 +10:00
basicauth_test.go caddyauth: only replace known placeholders in basic auth credentials (#8017) 2026-09-26 18:52:53 +10:00
bcrypt.go basicauth: Implement argon2id (#7186) 2025-10-06 17:27:06 -06:00
caddyauth.go caddyauth: isolate provider responses to prevent cross-provider clobbering (#7904) 2026-08-01 12:19:27 +10:00
caddyauth_test.go caddyauth: isolate provider responses to prevent cross-provider clobbering (#7904) 2026-08-01 12:19:27 +10:00
caddyfile.go basicauth: Implement argon2id (#7186) 2025-10-06 17:27:06 -06:00
command.go caddyauth: handle CRLF and unterminated hash-password input (#8227) 2026-10-16 22:29:54 +10:00
command_test.go caddyauth: handle CRLF and unterminated hash-password input (#8227) 2026-10-16 22:29:54 +10:00