Commit graph

4 commits

Author SHA1 Message Date
Jan Stępień
95f0f71441 Hash passwords with BCrypt instead of SHA1
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.

This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.

[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2] eab1c72/README.md
2011-09-07 16:05:52 +02:00
Eric Allen
6d3770c5fb Eliminated use of scenarios plugin
It doesn't work on Rails 2.3.5
2009-12-08 13:34:06 -05:00
bsag
6f760c768e Context model specs completed. Using fixtures for some examples currently, but might convert to mocks in future. Specs now offer same coverage as Test::Unit tests for Context model. 2008-06-22 15:30:38 +01:00
bsag
6e0999bd06 Initial work on specs for models - Context model spec started. 2008-06-21 14:28:01 +01:00