yesod-auth-hashdb

Authentication plugin for Yesod.

https://github.com/paul-rouse/yesod-auth-hashdb

Version on this page:1.7.1.1
LTS Haskell 23.19:1.7.1.7
Stackage Nightly 2025-04-30:1.7.1.7
Latest on Hackage:1.7.1.7

See all snapshots yesod-auth-hashdb appears in

MIT licensed by Patrick Brisbin, later changes Paul Rouse
Maintained by Paul Rouse
This version can be pinned in stack with:yesod-auth-hashdb-1.7.1.1@sha256:d784d1fcf7c9841db0abbca947d09ddcc1d605eff3182868f8e9d48adf6ff548,3550

Module documentation for 1.7.1.1

This package is the Yesod.Auth.HashDB plugin, originally included as part of yesod-auth, but now modified to be more secure and placed in a separate package.

It provides authentication using hashed passwords stored in a database, and works best in situations where an administrator is involved in setting up a user with an initial password.

The complete login process, including a default form, is implemented by this plugin, but the application developer must design the interfaces for setting up users and allowing them to change their own passwords, since only the low-level password-setting functions are provided by this package. (Note that other authentication plugins may be more appropriate if you wish to use email verification to set up accounts).

Changes

1.7.1.1

  • Fix test and relax upper bound for persistent-2.10 / persistent-template-2.7
  • Replace use of deprecated requireJsonBody

1.7.1

  • Relax upper bounds to allow persistent-2.9 (for GHC 8.6 versions of Stackage nightly)
  • Remove testing of GHC below 8.0.2, and lts below 9

1.7

  • Update for changes in yesod version 1.6, but retain compatibility with previous versions
  • Remove support for GHC below 7.10, and lts below 6

1.6.2

  • Use PasswordStore from yesod-auth instead of pwstore-fast (uses cryptonite instead of cryptohash)

1.6.1

  • Relax upper bound on persistent

1.6.0.1

  • Fix serious documentation layout problem caused by typo

1.6

This release completes the breaking changes started in 1.5. For details of upgrading, please see Upgrading.md.

  • Complete removal of compatibility with old databases designed for versions before 1.3
  • Add JSON support

1.5.1.3

  • Fix test failure with basic-prelude >= 0.6 (#6)

1.5.1.2

  • Relax upper bound to allow persistent-2.6

1.5.1.1

  • Minor documentation improvement
  • Reduce external-library dependencies for tests

1.5.1

  • Include CSRF token in default form

1.5

This release can break both old code and old database entries. For details of upgrading, please see Upgrading.md.

  • First phase of removing compatibility with old databases designed for versions before 1.3
  • Remove deprecated utilities (getAuthIdHashDB and pre-defined User data type)

1.4.3

  • Changes to work with persistent-2.5

1.4.2.2

  • Relax upper bound to allow persistent-2.2.*

1.4.2.1

  • Add ChangeLog

1.4.2

  • Deprecate getAuthIdHashDB (see #5)

1.4.1.2

  • Use internationalized messages
  • Increase defaultStrength

1.4.1.1

  • Minor documentation change

1.4.1

  • Expose additional validation function which does not need to read the database
  • Deprecate compatibility with old data which includes a salt field

1.4.0

  • Changes for Yesod 1.4

1.3.2

  • Documentation improvement

1.3.1

  • Optional custom login form
  • Deprecate predefined User data type
  • Changes for Persistent 2

1.3.0.1

  • Version bounds
  • Minor documentation changes

1.3

  • First release as a separate package, not part of yesod-auth