Quellcode durchsuchen
Merge pull request #1497 from slingamn/bcrypt_cost
reduce recommended bcrypt cost to the lowest allowed value
tags/v2.5.0-rc1
Shivaram Lingamneni
vor 3 Jahren
Ursprung
Commit
0e311e27ee
Es ist kein Account mit der E-Mail-Adresse des Committers verbunden
|
@@ -372,7 +372,8 @@ accounts:
|
372
|
372
|
max-attempts: 30
|
373
|
373
|
|
374
|
374
|
# this is the bcrypt cost we'll use for account passwords
|
375
|
|
- bcrypt-cost: 9
|
|
375
|
+ # (note that 4 is the lowest value allowed by the bcrypt library)
|
|
376
|
+ bcrypt-cost: 4
|
376
|
377
|
|
377
|
378
|
# length of time a user has to verify their account before it can be re-registered
|
378
|
379
|
verify-timeout: "32h"
|
|
@@ -344,7 +344,8 @@ accounts:
|
344
|
344
|
max-attempts: 30
|
345
|
345
|
|
346
|
346
|
# this is the bcrypt cost we'll use for account passwords
|
347
|
|
- bcrypt-cost: 9
|
|
347
|
+ # (note that 4 is the lowest value allowed by the bcrypt library)
|
|
348
|
+ bcrypt-cost: 4
|
348
|
349
|
|
349
|
350
|
# length of time a user has to verify their account before it can be re-registered
|
350
|
351
|
verify-timeout: "32h"
|