mirror of
https://github.com/penpot/penpot.git
synced 2026-08-29 08:08:46 +00:00
188a9cb29e
Use UUID-based demo emails to prevent concurrent profile collisions.\nUse fast PBKDF2 hashing for demo profiles while keeping regular user hashing unchanged.\nAdd focused coverage for hashing, email uniqueness, and the feature flag.\n\nAI-assisted-by: gpt-5.6-luna
37 lines
902 B
Clojure
37 lines
902 B
Clojure
;; This Source Code Form is subject to the terms of the Mozilla Public
|
|
;; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
;; file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
;;
|
|
;; Copyright (c) KALEIDOS INC Sucursal en España SL
|
|
|
|
(ns app.auth
|
|
(:require
|
|
[buddy.hashers :as hashers]))
|
|
|
|
(def ^:private default-options
|
|
{:alg :argon2id
|
|
:memory 32768 ;; 32 MiB
|
|
:iterations 3
|
|
:parallelism 2})
|
|
|
|
(def ^:private weak-options
|
|
{:alg :pbkdf2+sha256
|
|
:iterations 100})
|
|
|
|
(defn derive-password
|
|
[password]
|
|
(hashers/derive password default-options))
|
|
|
|
(defn derive-password-weak
|
|
"Derives a password with a fast algorithm for demo users."
|
|
[password]
|
|
(hashers/derive password weak-options))
|
|
|
|
(defn verify-password
|
|
[attempt password]
|
|
(try
|
|
(hashers/verify attempt password default-options)
|
|
(catch Throwable _
|
|
{:update false
|
|
:valid false})))
|