IT4Change/gradido
3
0
Fork 0
mirror of https://github.com/IT4Change/gradido.git synced 2026-04-06 01:25:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

generate random private key for those accounts with an intact passphrase

Browse Source
This commit is contained in:
Ulf Gebhardt 2022-01-22 05:42:01 +01:00
parent 138f09b4e0
commit 54afb80cc2
Signed by: ulfgebhardt
GPG Key ID: DA6B843E748679C9
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
database/migrations/0009-login_users_plug_holes.ts
View File

@ -6,6 +6,15 @@
*/ */
export async function upgrade(queryFn: (query: string, values?: any[]) => Promise<Array<any>>) { export async function upgrade(queryFn: (query: string, values?: any[]) => Promise<Array<any>>) {
// Generate a random private key where the remaining data is present
await queryFn(
`UPDATE login_users SET privkey = UNHEX(SHA1(RAND()))
WHERE privkey IS NULL
AND pubkey IS NOT NULL
AND password != 0
AND id IN (SELECT user_id FROM login_user_backups);`,
)
// Remove incomplete data and set account as not activated yet. // Remove incomplete data and set account as not activated yet.
await queryFn( await queryFn(
`UPDATE login_users SET password = 0, pubkey = NULL, email_checked = 0 WHERE privkey IS NULL;`, `UPDATE login_users SET password = 0, pubkey = NULL, email_checked = 0 WHERE privkey IS NULL;`,