Files
TORCH/test
google-labs-jules[bot]andPR0M3TH3AN 32ddd3fd7a fix(dashboard): secure dashboard authentication with scrypt hashing
- Implemented `verifyPassword` helper in `src/dashboard.mjs` to support hashed passwords.
- Added support for `scrypt:<salt>:<hash>` format for storing credentials.
- Maintained backward compatibility for plaintext passwords using `timingSafeCompare`.
- Updated `cmdDashboard` to use the new verification logic.
- Added comprehensive tests in `test/dashboard-auth.test.mjs` for hashed credential validation.

This change eliminates the need to store plaintext passwords in `torch-config.json` or environment variables, addressing a security vulnerability.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 18:31:02 +00:00
..
2026-02-19 17:05:13 -05:00
2026-02-19 17:05:13 -05:00
2026-02-20 16:53:17 -05:00