feat: allow other password hashing algorithms (#3229)

.pnp.js

@@ -158,7 +158,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["validator", "npm:13.7.0"],
             ["verdaccio-audit", "npm:10.2.2"],
             ["verdaccio-auth-memory", "npm:10.2.0"],
-            ["verdaccio-htpasswd", "npm:10.3.1"],
+            ["verdaccio-htpasswd", "npm:10.4.0"],
             ["verdaccio-memory", "npm:10.3.0"]
           ],
           "linkType": "SOFT",
@@ -18201,7 +18201,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["validator", "npm:13.7.0"],
             ["verdaccio-audit", "npm:10.2.2"],
             ["verdaccio-auth-memory", "npm:10.2.0"],
-            ["verdaccio-htpasswd", "npm:10.3.1"],
+            ["verdaccio-htpasswd", "npm:10.4.0"],
             ["verdaccio-memory", "npm:10.3.0"]
           ],
           "linkType": "SOFT",
@@ -18231,10 +18231,10 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
         }]
       ]],
       ["verdaccio-htpasswd", [
-        ["npm:10.3.1", {
-          "packageLocation": "./.yarn/cache/verdaccio-htpasswd-npm-10.3.1-3556ea6233-dbd8230d6a.zip/node_modules/verdaccio-htpasswd/",
+        ["npm:10.4.0", {
+          "packageLocation": "./.yarn/cache/verdaccio-htpasswd-npm-10.4.0-045bc61722-1ea4dd6816.zip/node_modules/verdaccio-htpasswd/",
           "packageDependencies": [
-            ["verdaccio-htpasswd", "npm:10.3.1"],
+            ["verdaccio-htpasswd", "npm:10.4.0"],
             ["@verdaccio/file-locking", "npm:10.3.0"],
             ["apache-md5", "npm:1.1.7"],
             ["bcryptjs", "npm:2.4.3"],

conf/default.yaml

@@ -55,6 +55,10 @@ auth:
     # Maximum amount of users allowed to register, defaults to "+inf".
     # You can set this to -1 to disable registration.
     # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10
 
 # https://verdaccio.org/docs/configuration#uplinks
 # a list of other known repositories we can talk to

conf/docker.yaml

@@ -59,6 +59,10 @@ auth:
     # Maximum amount of users allowed to register, defaults to "+infinity".
     # You can set this to -1 to disable registration.
     # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10
 
 # https://verdaccio.org/docs/configuration#uplinks
 # a list of other known repositories we can talk to

package.json

@@ -59,7 +59,7 @@
     "semver": "7.3.7",
     "validator": "13.7.0",
     "verdaccio-audit": "10.2.2",
-    "verdaccio-htpasswd": "10.3.1"
+    "verdaccio-htpasswd": "10.4.0"
   },
   "devDependencies": {
     "@babel/cli": "7.17.10",

yarn.lock

@@ -14988,16 +14988,16 @@ typescript@4.1.3:
   languageName: node
   linkType: hard
 
-"verdaccio-htpasswd@npm:10.3.1":
-  version: 10.3.1
-  resolution: "verdaccio-htpasswd@npm:10.3.1"
+"verdaccio-htpasswd@npm:10.4.0":
+  version: 10.4.0
+  resolution: "verdaccio-htpasswd@npm:10.4.0"
   dependencies:
     "@verdaccio/file-locking": 10.3.0
     apache-md5: 1.1.7
     bcryptjs: 2.4.3
     http-errors: 2.0.0
     unix-crypt-td-js: 1.1.4
-  checksum: dbd8230d6a2d834560310669ce4ecd4d0b4f888c3a418f0cd51af8ebb3703a12f9a625cc8619ef57c44f8821a5fd0146a234942d4097a2262a223218bf393c05
+  checksum: 1ea4dd681668f04a319485bb30b4be64968831f88377c8c5c89e4f5a87588cbae74efe27d99d7148d0245b0e8b8949a0e1e02489b0e0ff241fffc9b03cba1768
   languageName: node
   linkType: hard
 
@@ -15137,7 +15137,7 @@ typescript@4.1.3:
     validator: 13.7.0
     verdaccio-audit: 10.2.2
     verdaccio-auth-memory: 10.2.0
-    verdaccio-htpasswd: 10.3.1
+    verdaccio-htpasswd: 10.4.0
     verdaccio-memory: 10.3.0
   bin:
     verdaccio: ./bin/verdaccio