Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rehash user password on authentication with password #50

Merged
merged 3 commits into from
Jan 28, 2025
Merged

Conversation

kimitrii
Copy link
Owner

Changes Made

This PR implements password rehashing during user authentication. When a user successfully authenticates using their email/username and password, the system will rehash their password using the latest bcrypt settings and save the updated hash in the database. This enhancement ensures that passwords are continually secured with the most up-to-date hashing standards and higher salt, providing additional protection against potential brute-force attacks as computational capabilities evolve.

Resolves #45

Changes Type

  • New feature

Checklist:

  • The changes do not generate new error logs or warnings.
  • I have added tests that prove the fix or new feature works as expected.
  • Both new and existing tests pass locally.

@kimitrii kimitrii merged commit a3cea52 into main Jan 28, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Enhance Password Security by Rehashing on User Authentication
1 participant