sprig icon indicating copy to clipboard operation
sprig copied to clipboard

Allow specifying bcrypt version for htpasswd

Open fchan21 opened this issue 1 year ago • 1 comments

Currently, htpasswd only produces version 2a for hashing which is not accepted in more modern systems. There is a minor security concern with using 2a, so 2y is generally favored. While it might be a bit heavy-handed to force htpasswd to use 2y, it should at least be configurable using additional arguments passed in to the htpasswd function.

fchan21 avatar Oct 18 '24 21:10 fchan21

@fchan21 I like your Idea! Additionally a function would be nice to either call bcrypt independently with selecting the rounds / costs of the hash or just implement this possibility to the existing htpasswd function.

hornjo avatar May 13 '25 09:05 hornjo