Skip to content

Deprecate md5() and weak algos in passwordless API & normal login - #460

Merged
ozh merged 10 commits into
mainfrom
bye-bye-md5
Aug 25, 2026
Merged

ozh merged 10 commits into
mainfrom
bye-bye-md5

Conversation

@ozh

@ozh ozh commented May 27, 2026 •

Copy link
Copy Markdown
Member

Doc update reflecting future patch

People willing to continue using md5 or any other algo will be able to do so with an explicit filter, so no breaking change.

Ref: YOURLS/YOURLS#4111

Doc update reflecting future patch

People willing to continue using md5 or any other algo will be able to do so with an explicit filter, so no breaking change.
@ozh
ozh requested a review from a team as a code owner May 27, 2026 20:49
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented May 27, 2026 •

Copy link
Copy Markdown
Contributor

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
website f6200be Commit Preview URL

Branch Preview URL
Aug 25 2026, 09:31 AM

@ozh
ozh marked this pull request as draft May 27, 2026 20:52
Comment thread docs/guide/advanced/passwordless-api.md Outdated
Comment thread docs/guide/essentials/credentials.md
Comment thread docs/guide/essentials/credentials.md Outdated
@ozh ozh changed the title Deprecate md5() and weak algos in passwordless API Deprecate md5() and weak algos in passwordless API & normal login May 28, 2026
@ozh
ozh marked this pull request as ready for review May 28, 2026 20:22
LeoColomb and others added 3 commits May 28, 2026 20:45
Updated the example signature token to a 32 character string and clarified customization options.
@ozh

ozh commented May 30, 2026

Copy link
Copy Markdown
Member Author

(I undrafted this PR a couple days ago but then I'm still adding stuff, a bit dumb from me :) the real green sign for merging will be when I finish 4111. In the meantime, feel free to revise or reword anything here of course)

LeoColomb
LeoColomb previously approved these changes Jun 5, 2026
@ozh

ozh commented Jun 6, 2026

Copy link
Copy Markdown
Member Author

To be merged when 1.10.5 goes live 🚀

@ozh
ozh enabled auto-merge (squash) August 25, 2026 09:26
@ozh

ozh commented Aug 25, 2026

Copy link
Copy Markdown
Member Author

So. I cannot merge the PR with the blog post for 1.10.5 because no one has formally approved. I cannot merge here because somehow resolving a merge conflict has invalidated @LeoColomb's review. I cannot find the settings that would allow me to merge without waiting for a review.

This whole bureaucracy process is seriously pissing me off. This isn't collaboration : this is bureaucracy.

Someone please review and merge here + release 1.10.5 on YOURLS/YOURLS

@ozh
ozh merged commit e963461 into main Aug 25, 2026
23 checks passed
@ozh
ozh deleted the bye-bye-md5 branch August 25, 2026 10:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants