fix(be): add argon2 hash options (#1700)

* fix(be): add argon2 hash options * chore(be): constantization argon2 hash option --------- Co-authored-by: Jaehyeon Kim <[email protected]> Co-authored-by: Jaehyeon Kim <[email protected]>
skkuding · May 21, 2024 · 5b11d38 · 5b11d38
1 parent accdcd6
commit 5b11d38
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/apps/backend/apps/client/src/user/user.service.ts b/apps/backend/apps/client/src/user/user.service.ts
@@ -12,7 +12,7 @@ import { generate } from 'generate-password'
 import { ExtractJwt } from 'passport-jwt'
 import { type AuthenticatedRequest, JwtAuthService } from '@libs/auth'
 import { emailAuthenticationPinCacheKey } from '@libs/cache'
-import { EMAIL_AUTH_EXPIRE_TIME } from '@libs/constants'
+import { EMAIL_AUTH_EXPIRE_TIME, ARGON2_HASH_OPTION } from '@libs/constants'
 import {
   ConflictFoundException,
   DuplicateFoundException,
@@ -186,7 +186,7 @@ export class UserService {
           email
         },
         data: {
-          password: await hash(newPassword)
+          password: await hash(newPassword, ARGON2_HASH_OPTION)
         }
       })
       this.logger.debug(user, 'updateUserPasswordInPrisma')
@@ -351,7 +351,7 @@ export class UserService {
   }
 
   async createUser(signUpDto: SignUpDto): Promise<User> {
-    const encryptedPassword = await hash(signUpDto.password)
+    const encryptedPassword = await hash(signUpDto.password, ARGON2_HASH_OPTION)
 
     const user = await this.prisma.user.create({
       data: {

diff --git a/apps/backend/libs/constants/src/argon2.constants.ts b/apps/backend/libs/constants/src/argon2.constants.ts
@@ -0,0 +1,5 @@
+export const ARGON2_HASH_OPTION = {
+  timeCost: 2,
+  memoryCost: 2 ** 11,
+  parallelism: 1
+}
diff --git a/apps/backend/libs/constants/src/index.ts b/apps/backend/libs/constants/src/index.ts
@@ -2,3 +2,4 @@ export * from './oauth.constants'
 export * from './time.constants'
 export * from './rabbitmq.constants'
 export * from './submission.constants'
+export * from './argon2.constants'