Lukas Brübach fb7f7dde55 [Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords ... Challenge-response authentication: the client derives a scrypt verifier (RFC 7914, EVP_PBE_scrypt, N=32768, r=8, p=1) and authenticates with HMAC-SHA256(key, nonce), so neither the password nor its hash is transmitted. The stored format becomes "$scrypt$<n>$<r>$<p>$<salt>$<verifier>" and Response_PasswordSalt now carries the cost parameters. Strict servers only accept scrypt verifiers; legacy accounts are migrated after a successful login. Fix #344 for challenge-response servers: a saved profile stores the derived verifier under the password key instead of the plaintext password. The connect dialog loads it without revealing it, autoconnect passes it through, the change-password dialog no longer prefills the old password field with it, and the client only persists the verifier when "Save password" is checked. Took 3 minutes Took 1 minute Took 10 seconds Took 7 minutes		2026-08-29 15:58:57 +02:00
..
dlg_connect.cpp	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords	2026-08-29 15:58:57 +02:00
dlg_connect.h	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords	2026-08-29 15:58:57 +02:00
dlg_convert_deck_to_cod_format.cpp	[Move refactor] Move dialogs to interface/widgets/ (#6234)	2025-10-09 15:25:18 +02:00
dlg_convert_deck_to_cod_format.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_create_game.cpp	Fix share decklists checkbox to reflect actual game setting in game info dialog (#7094)	2026-08-10 23:31:58 +02:00
dlg_create_game.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_default_tags_editor.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_default_tags_editor.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_edit_avatar.cpp	Split trice_limits.h into dedicated headers (#7025)	2026-06-29 14:37:52 -07:00
dlg_edit_avatar.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_edit_password.cpp	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords	2026-08-29 15:58:57 +02:00
dlg_edit_password.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_edit_tokens.cpp	Split trice_limits.h into dedicated headers (#7025)	2026-06-29 14:37:52 -07:00
dlg_edit_tokens.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_edit_user.cpp	Split trice_limits.h into dedicated headers (#7025)	2026-06-29 14:37:52 -07:00
dlg_edit_user.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_filter_games.cpp	[GamesModel] Rename 'Creator' column to 'Host' (#7083)	2026-08-13 18:58:21 +02:00
dlg_filter_games.h	[GamesModel] Rename 'Creator' column to 'Host' (#7083)	2026-08-13 18:58:21 +02:00
dlg_forgot_password_challenge.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_forgot_password_challenge.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_forgot_password_request.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_forgot_password_request.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_forgot_password_reset.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_forgot_password_reset.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_invite_to_game.cpp	[Game] Add an invite button to non-started and not full games (#7143)	2026-08-17 21:37:15 +02:00
dlg_invite_to_game.h	[Game] Add an invite button to non-started and not full games (#7143)	2026-08-17 21:37:15 +02:00
dlg_load_deck.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_load_deck.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_load_deck_from_clipboard.cpp	[Settings][Dialog] Implement search for settings by text, description, tooltip, etc. (#7065)	2026-08-08 22:19:21 +02:00
dlg_load_deck_from_clipboard.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_load_deck_from_website.cpp	[DeckList] Refactor load from plaintext to take normalizer as param (#6664)	2026-03-06 10:39:04 -08:00
dlg_load_deck_from_website.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_load_remote_deck.cpp	[Cleanup] Unused #includes (#6367)	2025-11-29 18:53:11 +01:00
dlg_load_remote_deck.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_local_game_options.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_local_game_options.h	Add local game options (#6669)	2026-03-12 14:30:01 -07:00
dlg_manage_sets.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_manage_sets.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_my_reports.cpp	[Server/Client/Protocol] Reporting users + moderation queue functionality (#7091)	2026-08-21 15:00:13 +02:00
dlg_my_reports.h	[Server/Client/Protocol] Reporting users + moderation queue functionality (#7091)	2026-08-21 15:00:13 +02:00
dlg_register.cpp	[App] Add onboarding wizard (#7064)	2026-08-24 23:05:58 +02:00
dlg_register.h	[App] Add onboarding wizard (#7064)	2026-08-24 23:05:58 +02:00
dlg_report_user.cpp	[Server/Client/Protocol] Reporting users + moderation queue functionality (#7091)	2026-08-21 15:00:13 +02:00
dlg_report_user.h	[Server/Client/Protocol] Reporting users + moderation queue functionality (#7091)	2026-08-21 15:00:13 +02:00
dlg_select_set_for_cards.cpp	[CI] Remove Qt5 (#7071)	2026-08-08 22:04:50 +02:00
dlg_select_set_for_cards.h	[CI] Remove Qt5 (#7071)	2026-08-08 22:04:50 +02:00
dlg_settings.cpp	[Settings][Dialog] Implement search for settings by text, description, tooltip, etc. (#7065)	2026-08-08 22:19:21 +02:00
dlg_settings.h	[Settings][Dialog] Implement search for settings by text, description, tooltip, etc. (#7065)	2026-08-08 22:19:21 +02:00
dlg_startup_card_check.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_startup_card_check.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_tip_of_the_day.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_tip_of_the_day.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_update.cpp	[Dialogs] Focus login after selecting server, center update message box (#7080)	2026-08-05 20:09:22 +02:00
dlg_update.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
dlg_view_log.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
dlg_view_log.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
override_printing_warning.cpp	[Settings] Split cache_settings monolith into multiple SettingsManager sub-classes (#7050)	2026-07-27 11:25:39 +02:00
override_printing_warning.h	[DeckEditor] Show info in PrintingSelector dock when override printings enabled (#6554)	2026-01-24 02:20:16 -08:00
tip_of_the_day.cpp	style: Add braces to all control flow statements (#6887)	2026-05-16 19:19:53 +02:00
tip_of_the_day.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00