Commit Graph

5 Commits

Author SHA1 Message Date
Dane Everitt c82f273d85 Fix remaining broken tests 2018-07-04 19:38:23 -07:00
Dane Everitt bc3cb7bfd5 Fix broken session driver test 2018-03-10 13:02:49 -06:00
Dane Everitt 4c41bd9075 Fix some broken tests 2018-02-25 15:34:01 -06:00
Dane Everitt e3df0738da Change the way API keys are stored and validated; clarify API namespacing
Previously, a single key was used to access the API, this has not changed in terms of what the user sees. However, API keys now use an identifier and token internally. The identifier is the first 16 characters of the key, and the token is the remaining 32. The token is stored encrypted at rest in the database and the identifier is used by the API middleware to grab that record and make a timing attack safe comparison.
2018-01-13 16:06:19 -06:00
Dane Everitt 49379bd115 Pop some tests for new middleware in there. 2017-11-19 14:34:55 -06:00