gitea/docs/content/doc
zeripath e0853d4a21
Add API Token Cache (#16547)
One of the issues holding back performance of the API is the problem of hashing.
Whilst banning BASIC authentication with passwords will help, the API Token scheme
still requires a PBKDF2 hash - which means that heavy API use (using Tokens) can
still cause enormous numbers of hash computations.

A slight solution to this whilst we consider moving to using JWT based tokens and/or
a session orientated solution is to simply cache the successful tokens. This has some
security issues but this should be balanced by the security issues of load from
hashing.

Related #14668

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2021-08-17 14:30:42 -04:00
..
advanced Add API Token Cache (#16547) 2021-08-17 14:30:42 -04:00
developers Pre-fill suggested New File 'name' and 'content' with Query Params (#16556) 2021-07-29 05:39:46 +02:00
features Improve SMTP authentication and Fix user creation bugs (#16612) 2021-08-11 21:42:58 +01:00
help Added documentation about 413 errors with an nginx solution (#15313) 2021-07-10 02:16:07 +02:00
installation Add Linode as an installation option in docs (#16529) 2021-07-24 15:08:23 +01:00
translation
upgrade update branch in CI and docs (#15631) 2021-05-04 12:16:23 -04:00
usage Extend the fail2ban instructions with a hint on how to make X-Real-IP… (#16446) 2021-07-16 10:04:52 +01:00
advanced.en-us.md
advanced.fr-fr.md
advanced.zh-cn.md
advanced.zh-tw.md
developers.en-us.md
developers.zh-tw.md
features.en-us.md
features.zh-cn.md
features.zh-tw.md
help.en-us.md
help.fr-fr.md
help.zh-cn.md
help.zh-tw.md
installation.en-us.md
installation.fr-fr.md
installation.zh-cn.md
installation.zh-tw.md
translation.de-de.md
translation.en-us.md
translation.zh-tw.md
upgrade.en-us.md
upgrade.fr-fr.md
upgrade.zh-cn.md
upgrade.zh-tw.md
usage.en-us.md
usage.zh-cn.md
usage.zh-tw.md