whawty.auth is a simple file based authentication suite. It uses flat files containing password hashes. These hashes are currently based on scrypt but the algorithm can be upgraded to newer/stronger formats on the fly. To find out more about the storage backend read this file.
This repository contains a golang app which can act as a whawty.auth agent. You can use this app to manage usernames using a simple web UI. It also offers a saslauthd compatible unix socket to authenticate against it. This socket is also used by the PAM module which can be used to bring whawty.auth to PAM applications.
The whawty.auth app can be configured to automatically do upgrades to newer hash algorithms when a user logs in. This way it is possible to smoothly upgrade to newer/stronger hashing formats. The app also supports synchronisation between multiple hosts. A sample setup for this can be found here.
3-clause BSD
© 2016 Christian Pointner <equinox@spreadspace.org>
© 2016 Markus Grüneis <gimpf@gimpf.org>
whawty.auth makes use of zxcvbn from https://github.com/dropbox/zxcvbn.
The licence of zxcvbn can be found in the file LICENSE.zxcvbn