db: store all credentials in one SHA-256-hashed table

Browse Source

API keys, pre-auth keys and OAuth clients/tokens share one table and verify
path. Secrets carry 256 bits of crypto/rand entropy, so a SHA-256 digest
needs no stretching; bcrypt/argon2id rows rehash on use until 0.32.

...

This commit is contained in:

Kristoffer Dalby

2026-09-23 16:12:18 +00:00

committed by Kristoffer Dalby

parent e90500e3a9

commit 393dd3e2d9

39 changed files with 2176 additions and 680 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

hscontrol/db/testdata/postgres/headscale_0.29.3.pssql

Vendored

BIN

Binary file not shown.