SnitchItaly/backend
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Remove legacy hashes

Browse Source
This commit is contained in:
gabdevele
2026-06-02 20:37:06 +02:00 Unverified
parent 77744d9174
commit b59536757b
5 changed files with 5 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/MILESTONE_01.md
+1 -1
View File
@@ -10,7 +10,7 @@
- Focused regression tests for technical endpoints and core validation helpers.
- Local admin seed: `[email protected]` / `ChangeMe123!`, with forced password change flag.
- Multipart report photo upload endpoint storing files under `uploads/reports/`.
- PBKDF2-HMAC-SHA256 password hashes for new credentials, with legacy SHA-256 verification kept for existing local rows.
- PBKDF2-HMAC-SHA256 password hashes for credentials. Legacy SHA-256 hashes are intentionally rejected.
## To do next
- Consider Argon2id/bcrypt and password reset flows before production hardening.