github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-04 10:24:39 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FEATURE: Increase pbkdf2 iterations to 600k (#20981)

Browse Source 
Existing passwords will continue to work. Hashes will be regenerates on a user's next login.
This commit is contained in:
David Taylor
2023-04-11 11:56:20 +01:00
committed by GitHub
parent 352bd35bf6
commit ba5b035f6e
2 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
config/application.rb
View File

@ -144,7 +144,7 @@ module Discourse
config.active_record.use_schema_cache_dump = false
# per https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet
config.pbkdf2_iterations = 64_000
config.pbkdf2_iterations = 600_000
config.pbkdf2_algorithm = "sha256"
# rack lock is nothing but trouble, get rid of it