fix: use compiled-safe password hashing

2026-05-08 16:36:58 +00:00
parent cc6a81012c
commit 201602b733
7 changed files with 95 additions and 36 deletions
@@ -1,5 +1,12 @@
 # Changelog

+## 2026-05-08 - 1.24.6 - fix(auth)
+
+avoid bcrypt worker crashes in compiled binaries during login and password creation
+
+- replace bcrypt password hashing with a Web Crypto PBKDF2 hash format
+- remove legacy password-hash fallbacks; existing deployments need their admin user hash updated
+
 ## 2026-05-08 - 1.24.5 - fix(opsserver)

 start the OpsServer with typedserver custom routes registered through the UtilityWebsiteServer hook