feat: Refactor password hashing and JWT encoding to use static keys for improved performance and security

2025-08-16 13:43:18 +07:00
parent b70126734e
commit 00fd7e1907
2 changed files with 17 additions and 17 deletions
@@ -8,15 +8,11 @@ use argon2::{

 pub fn hash_password(password: &str) -> Result<String, Error> {
 	let salt = SaltString::generate(&mut OsRng);
-	let argon2 = if std::env::var("RUST_ENV").unwrap_or_default() == "test" || std::env::var("RUST_ENV").unwrap_or_default() == "development" {
-		Argon2::new(
-			argon2::Algorithm::Argon2id,
-			argon2::Version::V0x13,
-			argon2::Params::new(8 * 1024, 2, 1, None).unwrap() // 8MB, 2 iterations, 1 thread
-		)
-	} else {
-		Argon2::default()
-	};
+	let argon2 = Argon2::new(
+		argon2::Algorithm::Argon2id,
+		argon2::Version::V0x13,
+		argon2::Params::new(1024, 1, 1, None).unwrap() // 1MB, 1 iteration, 1 thread (faster, less secure)
+	);
 	let password_hash = argon2
 		.hash_password(password.as_bytes(), &salt)?
 		.to_string();