openhands b13b3a50ff security: switch default hashing to Argon2id, fix tests ...

- hashPassword now uses Argon2id (memory-hard, GPU-resistant) via hash-wasm
- verifyPassword checks both Argon2id and bcrypt
- Legacy hashes (bcrypt, argon2, md5, sha1, sha256, sha512, combined, salted)
  auto-migrate to Argon2id on successful login
- Updated all password tests to expect Argon2id format
- Register validation: min 12 chars, max 128, upper+lower+digit+special required
- Username restricted to [A-Za-z0-9_-], reserved names blocked
- Disposable email domains blocked
- Fixed parameter names for hash-wasm argon2id API (memorySize, iterations, parallelism, hashLength)

2026-09-21 19:48:31 +02:00

..

actions

security: switch default hashing to Argon2id, fix tests

2026-09-21 19:48:31 +02:00

app

fix(styles): generate shadcn color utilities via inline theme tokens

2026-09-20 16:44:45 +02:00

components

feat(nitro-cleanup): make delete button visible

2026-09-20 16:54:41 +02:00

db

fix: resolve all biome lint and TypeScript errors in test files

2026-09-21 18:37:39 +02:00

features

fix: resolve all biome lint and TypeScript errors in test files

2026-09-21 18:37:39 +02:00

hooks

fix(hk): protect unsaved editors and await prefix save results

2026-09-11 10:48:34 +02:00

i18n

feat: add CSV/JSON export, advanced bulk filters & selection to Catalog Manager

2026-09-12 20:40:33 +02:00

lib

security: switch default hashing to Argon2id, fix tests

2026-09-21 19:48:31 +02:00

messages

feat(referrals): add referral attribution and daily login rewards

2026-09-20 12:29:01 +02:00

test

lint: fix biome issues in new test files and helpers

2026-09-21 18:19:39 +02:00

types

Improve catalog studio UX and aggressive docker cleanup

2026-09-14 16:52:04 +02:00

env.ts

refactor(auth): remove obsolete CONVERT_PASSWORDS env var

2026-09-17 15:01:23 +02:00

instrumentation-client.ts

feat(admin): add production error center and refresh CMS dependencies

2026-09-05 19:53:09 +02:00

instrumentation.ts

feat(catalog): queue furniture imports with history and matching file attachments

2026-09-05 17:02:26 +02:00

proxy.ts

fix(security): authorize site uploads and harden tokens, media and request identity

2026-09-13 19:24:43 +02:00

test-repair-icons.test.ts

fix: skip icon-repair integration test when no DB is configured

2026-08-03 17:47:07 +02:00