Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: allow other password hashing algorithms #3229

Merged
merged 1 commit into from
Jun 14, 2022
Merged

Conversation

juanpicado
Copy link
Member

@juanpicado juanpicado commented Jun 14, 2022

Same as #1917 but in v.5.x.x
and crypt enable by default to avoid breaking changes.

Enable more algorithms for hasing password only for htpasswd plugin, crypt by default to avoid breaking changes but bcrypt recommended.

auth:
  htpasswd:
    file: ./htpasswd
    # Maximum amount of users allowed to register, defaults to "+inf".
    # You can set this to -1 to disable registration.
    # max_users: 1000
    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
    algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
    # Rounds number for "bcrypt", will be ignored for other algorithms.
    rounds: 10

ref verdaccio/monorepo#580

Same as #1917 but in v.5.x.x
and crypt enable by default to avoid breaking changes
@juanpicado juanpicado marked this pull request as ready for review June 14, 2022 18:25
@juanpicado juanpicado requested a review from a team June 14, 2022 18:25
@juanpicado juanpicado merged commit 87fbc0f into 5.x Jun 14, 2022
@delete-merged-branch delete-merged-branch bot deleted the feat-algorithm branch June 14, 2022 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant