CEF/ergo
1
0
Fork 0
forked from External/ergo
Code Pull requests Activity

Merge pull request #1497 from slingamn/bcrypt_cost

Browse source 
reduce recommended bcrypt cost to the lowest allowed value
This commit is contained in:
Shivaram Lingamneni 2021-01-21 08:25:21 -05:00 • committed by GitHub
commit 0e311e27ee
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
default.yaml
View file

@ -372,7 +372,8 @@ accounts:
max-attempts: 30
# this is the bcrypt cost we'll use for account passwords
bcrypt-cost: 9
# (note that 4 is the lowest value allowed by the bcrypt library)
bcrypt-cost: 4
# length of time a user has to verify their account before it can be re-registered
verify-timeout: "32h"

3
traditional.yaml
View file

@ -344,7 +344,8 @@ accounts:
max-attempts: 30
# this is the bcrypt cost we'll use for account passwords
bcrypt-cost: 9
# (note that 4 is the lowest value allowed by the bcrypt library)
bcrypt-cost: 4
# length of time a user has to verify their account before it can be re-registered
verify-timeout: "32h"