1
1
mirror of https://github.com/go-gitea/gitea synced 2025-01-26 17:44:27 +00:00
zeripath e0853d4a21
Add API Token Cache (#16547)
One of the issues holding back performance of the API is the problem of hashing.
Whilst banning BASIC authentication with passwords will help, the API Token scheme
still requires a PBKDF2 hash - which means that heavy API use (using Tokens) can
still cause enormous numbers of hash computations.

A slight solution to this whilst we consider moving to using JWT based tokens and/or
a session orientated solution is to simply cache the successful tokens. This has some
security issues but this should be balanced by the security issues of load from
hashing.

Related #14668

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2021-08-17 14:30:42 -04:00
..
2021-05-16 19:58:26 +08:00
2021-06-29 22:00:02 +01:00
2021-04-05 08:41:22 +01:00
2020-04-05 07:20:50 +01:00
2021-08-17 14:30:42 -04:00
2021-08-12 14:43:08 +02:00
2021-06-25 16:28:55 +02:00
2021-06-07 07:27:09 +02:00
2021-08-12 14:43:08 +02:00
2021-05-01 22:51:03 -04:00
2021-08-17 14:30:42 -04:00
2021-08-12 14:43:08 +02:00
2020-04-05 07:20:50 +01:00
2020-08-16 23:07:38 -04:00
2020-03-02 00:05:44 +02:00
2020-04-05 07:20:50 +01:00
2021-06-25 12:59:25 -04:00
2021-08-12 14:43:08 +02:00