Commit Graph

35 Commits

Author SHA1 Message Date
bfa042b42d auth: fix iterations decode error in hashCrypt (#43578)
close pingcap/tidb#43576
2023-05-10 01:30:08 +00:00
0950948125 *: enable mirror linter (#43644)
ref pingcap/tidb#40786
2023-05-09 10:23:05 +00:00
e942ab6148 kazel: support auto-config shard_count (#42751)
close pingcap/tidb#42827
2023-04-06 15:46:58 +08:00
556c267758 server, privileges: make tidb_auth_session_token compatible with password expiration and resource group (#40735)
ref pingcap/tidb#40614
2023-01-20 13:51:49 +08:00
57febedb35 *: enable rowserrcheck for nogo (#37761) 2022-09-13 14:28:58 +08:00
1d482db4dd *: Support for tidb_sm3_password authentication (#36193)
close pingcap/tidb#36192
2022-09-08 12:00:57 +08:00
a89ef1f276 *: support ACCOUNT (UN)LOCK when creating/altering user (#37052)
close pingcap/tidb#35961, close pingcap/tidb#37051
2022-08-25 16:12:22 +08:00
d6d0ce7b10 *: gofmt code for adapting go 1.19 (#36832)
ref pingcap/tidb#36879
2022-08-11 12:50:49 +08:00
5b4a82dbf4 *: upgrade bazel timeout (#36776) 2022-08-02 11:10:05 +08:00
bf743a6ca0 *: enable flaky test for all test (#36385)
close pingcap/tidb#36404
2022-07-22 15:35:09 +08:00
911e7cc360 *: enable revive (#35970)
ref pingcap/tidb#35345
2022-07-15 16:03:06 +08:00
6eeabd4f54 parser/auth: Optimize caching sha2 speed (#35999)
close pingcap/tidb#35998
2022-07-08 11:35:03 +08:00
114c922bc8 *: enable gosec (#35873)
ref pingcap/tidb#35345
2022-07-05 19:39:01 +08:00
2b4a4c6d7a *: support bazel (#33691)
close pingcap/tidb#34083
2022-06-07 15:22:30 +08:00
85c595c34b session: fix user info in general log (#34853)
close pingcap/tidb#34852
2022-05-24 11:20:46 +08:00
f6a44bf72c *: add limitation for UserName and HostName. (#33224)
close pingcap/tidb#32682
2022-03-21 16:06:33 +08:00
b4df7ca4dc test: make all the tests run in serial (#30692) 2021-12-14 18:06:36 +08:00
376d5428cc *: Fix use of user identity in SHOW GRANTS + error messages (#30294) 2021-12-07 14:59:55 +08:00
9409d54d81 expression: support builtin func password for GBK (#29202) 2021-11-05 12:17:02 +08:00
11b61738f3 parser: migrate test-infra to testify (#29191) 2021-10-28 12:30:49 +08:00
xhe
94e30df8e2 parser: fix compiling, add unit tests (#28700) 2021-10-11 23:15:25 +08:00
c95be4aaa6 [parser] auth: caching_sha2_password salt fix (#1249)
- a NUL or '$' could get replaced with another NUL or '$'
- Replacement characters didn't get their first bit set to 0 (`&^ 128`)
- The test case used the index number instead of the value of the rune.
2021-10-09 14:53:23 +08:00
4415136781 [parser] auth: check for NUL in caching_sha2_password salt (#1246) 2021-10-09 14:53:23 +08:00
768ee171c1 [parser] auth: Fix salt generation of caching_sha2_password (#1242)
This code intended to set the first bit of every byte of the salt
to 0 as the salt should not contain multi-byte UTF-8.

However it failed to do this. This changes the `^` with a `^&` to fix
that.

In addition to that this also avoids the '$' inside salts as that is
already used as delimiter in the authentication string.

Co-authored-by: tiancaiamao <tiancaiamao@gmail.com>
2021-10-09 14:53:23 +08:00
12d0a279c4 [parser] parser,ast: Support for authentication plugins (#1236) 2021-10-09 14:53:23 +08:00
8d23ad21c9 [parser] auth: add the caching sha2 algorithm for authentication (#1232)
This allows validating passwords against the `authentication_string`
data that MySQL stores for caching_sha2 passwords.

Related:
- https://github.com/pingcap/tidb/issues/9411
2021-10-09 14:53:23 +08:00
a276562af7 [parser] auth: fix CheckScrambledPassword() panic for invalid input (#1197)
* auth: fix CheckScrambledPassword() panic for invalid input

* fix CI

Co-authored-by: ti-srebot <66930949+ti-srebot@users.noreply.github.com>
2021-10-09 14:53:23 +08:00
d0d67ddb9e [parser] *: support GRANT PROXY (#1142) 2021-10-09 14:53:23 +08:00
6eb2909901 [parser] change all dot import, according to staticcheck (#730)
* change all dot import, according to staticcheck

* make staticcheck happy
2021-10-09 14:53:23 +08:00
989870f109 [parser] *: remove testleak (#676) 2021-10-09 14:53:23 +08:00
bee7de1fb7 [parser] parser, ast: add SET ROLE support (#228) 2021-10-09 14:53:23 +08:00
7e78a3671e [parser] use safe String() for UserIdentity (#227) 2021-10-09 14:53:23 +08:00
82847ebc2a [parser] parser: add gramma for RBAC (#213) 2021-10-09 14:53:23 +08:00
ac9b7fbb7a [parser] parser: implement Restore for CreateUserStmt, AlterUserStmt and DropUserStmt (#197) 2021-10-09 14:53:23 +08:00
c270f55405 [parser] *: move github.com/pingcap/tidb/parser here (#1) 2021-10-09 14:53:23 +08:00