wufengping/koc-loop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix password hashing for Workers runtime

Browse Source
This commit is contained in:
巫凤萍
2026-08-07 11:20:31 +08:00
parent c926a6a874
commit bd9b0c3871
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/user-auth.ts
View File

@@ -15,7 +15,8 @@ export type RequestPrincipal =
const SESSION_COOKIE = "koc_session"; const SESSION_COOKIE = "koc_session";
const SESSION_MAX_AGE_SECONDS = 60 * 60 * 24 * 7; const SESSION_MAX_AGE_SECONDS = 60 * 60 * 24 * 7;
const PASSWORD_ITERATIONS = 120_000; // Cloudflare Workers caps PBKDF2 at 100,000 iterations.
const PASSWORD_ITERATIONS = 100_000;
function bytesToHex(bytes: Uint8Array) { function bytesToHex(bytes: Uint8Array) {
return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join(""); return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");

1
tests/rendered-html.test.mjs
View File

@@ -288,6 +288,7 @@ test("provides simple username-password login and three server-enforced roles",
assert.match(logoutRoute, /deleteSession/); assert.match(logoutRoute, /deleteSession/);
assert.match(logoutRoute, /clearSessionCookie/); assert.match(logoutRoute, /clearSessionCookie/);
assert.match(auth, /PBKDF2/); assert.match(auth, /PBKDF2/);
assert.match(auth, /PASSWORD_ITERATIONS = 100_000/);
assert.match(auth, /HttpOnly/); assert.match(auth, /HttpOnly/);
assert.match(auth, /SameSite=Lax/); assert.match(auth, /SameSite=Lax/);
assert.match(auth, /SELECT id FROM users WHERE role = 'super_admin' LIMIT 1/); assert.match(auth, /SELECT id FROM users WHERE role = 'super_admin' LIMIT 1/);