gerrit/gerrit-pgm/src/main/java/com/google/gerrit/pgm
Han-Wen Nienhuys 84d830b5b3 gerrit-server: use hashed passwords for HTTP.
Consequences:
* Removes the GET endpoint for the HTTP password
* Removes digest authentication
* Removes auth.gitBasicAuth config option.

With the move to NoteDB, the per-account data (including the HTTP
password) will be stored in a branch in the All-Users repo, where
it is subject to Gerrit ACLs.  Since these are notoriously hard to
setup correctly, we want to avoid storing the password in plaintext.

With this change, we support hashed passwords, and a schema upgrade
populates the existing 'password' field using previous passwords.

Tested migration manually:

  * ran schema upgrade
  * verified that schema upgrade inserts hashed passwords with gsql.
  * verified that the password still works with the new code.

Tested passwords manually:
  * verified that correct passwords get accepted when using curl --user.
  * verified that wrong passwords get rejected when using curl --user.

Change-Id: I26f5bcd7848040107e3721eeabf75baeb79c1724
2017-02-28 09:09:33 +01:00
..
http/jetty Merge branch 'stable-2.13' 2017-02-08 16:36:09 +09:00
init gerrit-server: use hashed passwords for HTTP. 2017-02-28 09:09:33 +01:00
rules Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
util Format java files with google-java-format 2017-02-17 13:21:04 +09:00
Cat.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Daemon.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Gsql.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Init.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
JythonShell.java JythonShell: Fix ClassNewInstance warning flagge by error prone 2017-02-20 00:02:07 +00:00
LocalUsernamesToLowerCase.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Ls.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Passwd.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
PrologShell.java Squash redundant string concatenations introduced by google-java-format 2017-02-17 08:57:46 +09:00
ProtoGen.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
ProtobufImport.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
RebuildNoteDb.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Reindex.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Rulec.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
SetPasswd.java Gerrit command line utility to set/update secure.config 2017-01-12 00:25:25 +00:00
SwitchSecureStore.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00
Version.java pgm: Move non commands into a util package 2009-11-18 20:00:40 -08:00
WarDistribution.java Format all Java files with google-java-format 2017-02-07 10:04:39 +09:00