5 Commits

Author	SHA1	Message	Date
Andrew Ruthven	07c32697dd	More testing of cached auth credentials ... Test more scenarios, to make sure the cache is used or not used when it should be.	2024-05-27 09:46:12 +12:00
Andrew Ruthven	1077714a83	Make the log lines have consistent prefixes	2024-05-03 23:35:26 +12:00
Andrew Ruthven	af458f9d90	Remove default expiry times, make 0 disabled.	2024-05-03 23:35:26 +12:00
Andrew Ruthven	3c475a283c	Switch to using hash_hmac, SHA256 and bcrypt for caching credentials ... We also use a locally set password (aka a pepper) to ensure that the contents of memcached isn't sufficient to perform dictionary attacks on the cached credentials.	2024-05-03 23:35:26 +12:00
Andrew Ruthven	521594bc3f	Add testing for LDAP with memcache	2024-05-03 23:35:25 +12:00