Something went wrong. Try again.
Something went wrong. Try again.
2.3 kB · 75 lines
TypeScript
at main
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576import { defineConfig, drivers } from '@adonisjs/core/hash'
/** * Hashing configuration. * * This starter uses Node.js scrypt under the hood. * Node.js reference: https://nodejs.org/api/crypto.html#cryptoscryptpassword-salt-keylen-options-callback */const hashConfig = defineConfig({ /** * Default hasher used by the application. */ default: 'scrypt',
list: { /** * Scrypt is memory-hard, which makes brute-force attacks more expensive. */ scrypt: drivers.scrypt({ /** * Work factor (Node alias: N / cost). * Higher values increase security and CPU+memory usage. * * Tuning guideline: * - Start with 16384. * - Increase gradually (for example 32768) and benchmark login/signup latency. * - Keep values practical for your slowest production machine. * * Node constraint: value must be a power of two greater than 1. */ cost: 16384,
/** * Block size (Node alias: r / blockSize). * Increases memory and CPU linearly. * * Tuning guideline: * - Keep 8 unless you have a measured reason to change it. * - Raise only with benchmark data, because memory usage grows quickly. */ blockSize: 8,
/** * Parallelization (Node alias: p / parallelization). * Controls how many independent computations are performed. * * Tuning guideline: * - Keep 1 for most applications. * - Increase only after load testing if your infrastructure benefits from it. */ parallelization: 1,
/** * Maximum memory limit in bytes (Node alias: maxmem / maxMemory). * Hashing throws if the estimated memory usage is above this limit. * Node documents the check as approximately: 128 * N * r > maxmem. * * Tuning guideline: * - Keep this aligned with your cost/blockSize choices. * - Increase carefully on memory-constrained environments. */ maxMemory: 33554432, }), },})
export default hashConfig
/** * Inferring types for the list of hashers you have configured * in your application. */declare module '@adonisjs/core/types' { export interface HashersList extends InferHashers<typeof hashConfig> {}}