SnitchItaly/backend
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Harden password hashing

Browse Source
This commit is contained in:
gabdevele
2026-06-02 19:42:38 +02:00 Unverified
parent 68d2a46584
commit 1760e815be
3 changed files with 78 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/MILESTONE_01.md
+2 -1
View File
@@ -10,9 +10,10 @@
- Focused regression tests for technical endpoints and core validation helpers.
- Local admin seed: `[email protected]` / `ChangeMe123!`, with forced password change flag.
- Multipart report photo upload endpoint storing files under `uploads/reports/`.
- PBKDF2-HMAC-SHA256 password hashes for new credentials, with legacy SHA-256 verification kept for existing local rows.
## To do next
- Harden password hashing with Argon2id or bcrypt before production.
- Consider Argon2id/bcrypt and password reset flows before production hardening.
- Add real email provider configuration for non-local environments.
- Add CIE/SPID integration design and provider adapters.
- Expand frontend-driven API coverage as Vue screens are implemented.