MarSeventh baca53a631 security: upgrade password hashing to PBKDF2 and fix API token generation ...

- Replace single-round SHA-256 with PBKDF2 (100k iterations) via Web Crypto API
- Auto-rehash old SHA-256/plaintext passwords to PBKDF2 on successful login
- Add timing-safe comparison to prevent timing attacks
- Replace Math.random() with crypto.getRandomValues() for API token and token ID generation
- Maintain full backward compatibility with existing SHA-256 hashes and plaintext passwords

2026-04-18 00:45:04 +08:00

..

api

security: upgrade password hashing to PBKDF2 and fix API token generation

2026-04-18 00:45:04 +08:00

dav

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

file

Fix missing returnBlockImg import in file handler

2026-03-03 18:07:43 +00:00

random

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

upload

Bug:修复偶发的HF渠道移动文件导致文件丢失的问题

2026-03-02 22:13:18 +08:00

utils

security: upgrade password hashing to PBKDF2 and fix API token generation

2026-04-18 00:45:04 +08:00