Repository navigation
feat(security): deprecate weak hash algorithms and enforce strong sec… - #35
Merged
Merged
Conversation
…rets - Mark SHA-1 and MD5 as deprecated in HashAlgorithm enum with security warnings - Add minimum 32-character requirement for JWT secret keys to prevent brute-force attacks - Implement secret length validation in jwt_sign function with detailed error messages - Update JWT examples to use strong secrets with at least 32 characters - Add comprehensive tests for weak secret rejection and minimum valid secret acceptance - Remove deprecated test binary configuration and source file - Add request body size validation in HTTP client to prevent DoS attacks - Introduce max_request_size configuration with 10MB default and 100MB maximum - Add validation for request size limits in HTTP configuration - Reduce WebSocket pong timeout from 90 seconds to 30 seconds for faster zombie detection - Improve circuit breaker failure recording with atomic state transitions - Enhance rate limiter calculations using u128 to prevent overflow for long uptimes - Update documentation comments and test descriptions with security considerations
…mplementations - Added #[allow(deprecated)] attribute to HashAlgorithm::from_str method - Added #[allow(deprecated)] attribute to HashAlgorithm Display implementation - Added #[allow(deprecated)] attribute to hmac signing function - Added #[allow(deprecated)] attribute to hash function implementation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
…rets