refactor: switch password hashing from argon2 to bcrypt

Browse Source

- hashPassword now emits bcrypt (cost 12) instead of argon2id
- checkLogin migrates legacy md5/argon2id hashes to bcrypt on sign-in
- keep argon2id verification only as a one-time migration path
- replace ARGON2_* env vars with BCRYPT_COST

...

This commit is contained in:

openhands committed 2026-08-03 18:08:57 +02:00

1 parent 6fc14b9b84

commit 30ed2b8ce2

4 files changed

+42 -53

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/lib/auth/password.test.ts

+15 -29

File diff suppressed because it is too large. Load diff