upd: swap bcrypt to argon2, add misskey-js to dev, auto load replies

2023-09-22 00:21:57 +02:00
parent 03b5acf17f
commit 7111c6c90b
20 changed files with 105 additions and 43 deletions
@@ -4,7 +4,8 @@
 */

 import { Inject, Injectable } from '@nestjs/common';
-import bcrypt from 'bcryptjs';
+//import bcrypt from 'bcryptjs';
+import * as argon2 from 'argon2';
 import { Endpoint } from '@/server/api/endpoint-base.js';
 import type { UsersRepository, UserProfilesRepository } from '@/models/_.js';
 import { DI } from '@/di-symbols.js';
@@ -61,7 +62,7 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
 			const passwd = secureRndstr(8);

 			// Generate hash of password
-			const hash = bcrypt.hashSync(passwd);
+			const hash = await argon2.hash(passwd);

 			await this.userProfilesRepository.update({
 				userId: user.id,