mirror of
https://github.com/penpot/penpot.git
synced 2026-11-07 18:40:41 +00:00
3df039abc3
* ⚡ Optimize demo user setup for performance tests Use UUID-based demo emails to prevent concurrent profile collisions.\nUse fast PBKDF2 hashing for demo profiles while keeping regular user hashing unchanged.\nAdd focused coverage for hashing, email uniqueness, and the feature flag.\n\nAI-assisted-by: gpt-5.6-luna * 🐛 Harden font upload test setup Report upload-session errors before chunk validation. Skip chunk uploads when the session ID is invalid. Remove unnecessary Mockery state from the foreign-font test. AI-assisted-by: gpt-5.6-luna * ✨ Add demo profile purge task Schedule delayed deletion for demo profiles through the worker system. Restore normal profile filtering and cover the purge handler with tests. AI-assisted-by: gpt-5.6-luna
39 lines
1.0 KiB
Clojure
39 lines
1.0 KiB
Clojure
;; This Source Code Form is subject to the terms of the Mozilla Public
|
|
;; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
;; file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
;;
|
|
;; Copyright (c) KALEIDOS INC Sucursal en España SL
|
|
|
|
(ns app.auth
|
|
(:require
|
|
[buddy.hashers :as hashers]))
|
|
|
|
(def ^:private default-options
|
|
{:alg :argon2id
|
|
:memory 32768 ;; 32 MiB
|
|
:iterations 3
|
|
:parallelism 2})
|
|
|
|
(def ^:private weak-options
|
|
{:alg :pbkdf2+sha256
|
|
:iterations 100})
|
|
|
|
(defn derive-password
|
|
[password]
|
|
(hashers/derive password default-options))
|
|
|
|
(defn derive-password-weak
|
|
"Derives a password using a fast algorithm (pbkdf2+sha256, 100 iterations).
|
|
Intended for demo users only — they are already gated behind the
|
|
`demo-users` config flag which is disabled in production."
|
|
[password]
|
|
(hashers/derive password weak-options))
|
|
|
|
(defn verify-password
|
|
[attempt password]
|
|
(try
|
|
(hashers/verify attempt password default-options)
|
|
(catch Throwable _
|
|
{:update false
|
|
:valid false})))
|