BCrypt cost for application

jeremyevans / rodauth

Ruby's Most Advanced Authentication Framework

http://rodauth.jeremyevans.net

MIT License

1.7k stars 94 forks source link

BCrypt cost for application #156

Closed jswright61 closed 3 years ago

jswright61 commented 3 years ago

I would like to know how to set a default cost for BCrypt hashes. Currently the system default is used. I would like to set a custom default for the application.

Currently the cost is set in lib/rodauth/features/login_password_requirements_base.rb. I would like to set an application default cost in the initializer and have Rodauth use that in preference to the BCrypt::Engine::DEFAULT_COST if it exists.

jeremyevans commented 3 years ago

You can use the password_hash_cost configuration method to set the cost (see http://rodauth.jeremyevans.net/rdoc/files/doc/login_password_requirements_base_rdoc.html).

As explained in the contribution guidelines, GitHub Issues should only be used to file bugs in the library. Please use the Rodauth Google Group if you have questions about Rodauth.