feat: allow other password hashing algorithms (#3229)

verdaccio · Jun 14, 2022 · 87fbc0f · 87fbc0f
1 parent 3c06bbd
commit 87fbc0f
Show file tree

Hide file tree

Showing 7 changed files with 19 additions and 11 deletions.
diff --git a/.pnp.js b/.pnp.js
diff --git a/.yarn/cache/verdaccio-htpasswd-npm-10.3.1-3556ea6233-dbd8230d6a.zip b/.yarn/cache/verdaccio-htpasswd-npm-10.3.1-3556ea6233-dbd8230d6a.zip
diff --git a/.yarn/cache/verdaccio-htpasswd-npm-10.4.0-045bc61722-1ea4dd6816.zip b/.yarn/cache/verdaccio-htpasswd-npm-10.4.0-045bc61722-1ea4dd6816.zip
diff --git a/conf/default.yaml b/conf/default.yaml
@@ -55,6 +55,10 @@ auth:
     # Maximum amount of users allowed to register, defaults to "+inf".
     # You can set this to -1 to disable registration.
     # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10
 
 # https://verdaccio.org/docs/configuration#uplinks
 # a list of other known repositories we can talk to

diff --git a/conf/docker.yaml b/conf/docker.yaml
@@ -59,6 +59,10 @@ auth:
     # Maximum amount of users allowed to register, defaults to "+infinity".
     # You can set this to -1 to disable registration.
     # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10
 
 # https://verdaccio.org/docs/configuration#uplinks
 # a list of other known repositories we can talk to

diff --git a/package.json b/package.json
@@ -59,7 +59,7 @@
     "semver": "7.3.7",
     "validator": "13.7.0",
     "verdaccio-audit": "10.2.2",
-    "verdaccio-htpasswd": "10.3.1"
+    "verdaccio-htpasswd": "10.4.0"
   },
   "devDependencies": {
     "@babel/cli": "7.17.10",

diff --git a/yarn.lock b/yarn.lock
@@ -14988,16 +14988,16 @@ typescript@4.1.3:
   languageName: node
   linkType: hard
 
-"verdaccio-htpasswd@npm:10.3.1":
-  version: 10.3.1
-  resolution: "verdaccio-htpasswd@npm:10.3.1"
+"verdaccio-htpasswd@npm:10.4.0":
+  version: 10.4.0
+  resolution: "verdaccio-htpasswd@npm:10.4.0"
   dependencies:
     "@verdaccio/file-locking": 10.3.0
     apache-md5: 1.1.7
     bcryptjs: 2.4.3
     http-errors: 2.0.0
     unix-crypt-td-js: 1.1.4
-  checksum: dbd8230d6a2d834560310669ce4ecd4d0b4f888c3a418f0cd51af8ebb3703a12f9a625cc8619ef57c44f8821a5fd0146a234942d4097a2262a223218bf393c05
+  checksum: 1ea4dd681668f04a319485bb30b4be64968831f88377c8c5c89e4f5a87588cbae74efe27d99d7148d0245b0e8b8949a0e1e02489b0e0ff241fffc9b03cba1768
   languageName: node
   linkType: hard
 
@@ -15137,7 +15137,7 @@ typescript@4.1.3:
     validator: 13.7.0
     verdaccio-audit: 10.2.2
     verdaccio-auth-memory: 10.2.0
-    verdaccio-htpasswd: 10.3.1
+    verdaccio-htpasswd: 10.4.0
     verdaccio-memory: 10.3.0
   bin:
     verdaccio: ./bin/verdaccio