rixty/SillyTavern
1
0
Fork 0
mirror of https://github.com/SillyTavern/SillyTavern.git synced 2025-02-03 12:47:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Switch password hashing function to scrypt

Browse Source
This commit is contained in:
Cohee 2024-04-13 15:40:47 +03:00
parent 716d1fc988
commit 59657766b5
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/users.js
View File

@ -40,7 +40,7 @@ const STORAGE_KEYS = {
* @property {string} handle - The user's short handle. Used for directories and other references
* @property {string} name - The user's name. Displayed in the UI
* @property {number} created - The timestamp when the user was created
* @property {string} password - SHA256 hash of the user's password
* @property {string} password - Scrypt hash of the user's password
* @property {string} salt - Salt used for hashing the password
* @property {boolean} enabled - Whether the user is enabled
* @property {boolean} admin - Whether the user is an admin (can manage other users)
@ -372,13 +372,13 @@ function getCookieSessionName() {
}
/**
* Hashes a password using SHA256.
* Hashes a password using scrypt with the provided salt.
* @param {string} password Password to hash
* @param {string} salt Salt to use for hashing
* @returns {string} Hashed password
*/
function getPasswordHash(password, salt) {
return crypto.createHash('sha256').update(password + salt).digest('hex');
return crypto.scryptSync(password.normalize(), salt, 64).toString('base64');
}
/**