Implement admin password hashing with bcrypt (#3754)

* Add bcrypt hashing helpers

* SetAdminPassword now hashes the password before saving it

* BasicAuth now compares the bcrypt hash for the password

* Modify migration2 to avoid a double password hash when upgrading

* Add migration for bcrypt hashed password

* Do not show admin password hash as initial value

* Update api tests to compare the bcrypt hash of the admin password instead

* Remove old admin password api tests

---------

Co-authored-by: Gabe Kangas <gabek@real-ity.com>
This commit is contained in:
mahmed2000
2024-06-27 09:20:22 +05:00
committed by GitHub
parent 51cd16dcc1
commit a7e5f20337
8 changed files with 497 additions and 3061 deletions

View File

@@ -9,12 +9,13 @@
"author": "",
"license": "ISC",
"dependencies": {
"supertest": "^6.3.2",
"websocket": "^1.0.32",
"ajv": "^8.11.0",
"ajv-draft-04": "^1.0.0",
"bcrypt": "^5.1.1",
"crypto-random": "^2.0.1",
"jsonfile": "^6.1.0",
"crypto-random": "^2.0.1"
"supertest": "^6.3.2",
"websocket": "^1.0.32"
},
"devDependencies": {
"jest": "^29.7.0",