rixty/SillyTavern
1
0
Fork 0
mirror of https://github.com/SillyTavern/SillyTavern.git synced 2025-06-05 21:59:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Switch password hashing function to scrypt

Browse Source
This commit is contained in:
Cohee
2024-04-13 15:40:47 +03:00
parent 716d1fc988
commit 59657766b5
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/users.js
View File

@@ -40,7 +40,7 @@ const STORAGE_KEYS = {
* @property {string} handle - The user's short handle. Used for directories and other references * @property {string} handle - The user's short handle. Used for directories and other references
* @property {string} name - The user's name. Displayed in the UI * @property {string} name - The user's name. Displayed in the UI
* @property {number} created - The timestamp when the user was created * @property {number} created - The timestamp when the user was created
* @property {string} password - SHA256 hash of the user's password * @property {string} password - Scrypt hash of the user's password
* @property {string} salt - Salt used for hashing the password * @property {string} salt - Salt used for hashing the password
* @property {boolean} enabled - Whether the user is enabled * @property {boolean} enabled - Whether the user is enabled
* @property {boolean} admin - Whether the user is an admin (can manage other users) * @property {boolean} admin - Whether the user is an admin (can manage other users)
@@ -372,13 +372,13 @@ function getCookieSessionName() {
} }
/** /**
* Hashes a password using SHA256. * Hashes a password using scrypt with the provided salt.
* @param {string} password Password to hash * @param {string} password Password to hash
* @param {string} salt Salt to use for hashing * @param {string} salt Salt to use for hashing
* @returns {string} Hashed password * @returns {string} Hashed password
*/ */
function getPasswordHash(password, salt) { function getPasswordHash(password, salt) {
return crypto.createHash('sha256').update(password + salt).digest('hex'); return crypto.scryptSync(password.normalize(), salt, 64).toString('base64');
} }
/** /**