feat: allow other password hashing algorithms (#3229)

.pnp.js

@@ -158,7 +158,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["validator", "npm:13.7.0"],
             ["verdaccio-audit", "npm:10.2.2"],
             ["verdaccio-auth-memory", "npm:10.2.0"],
-            ["verdaccio-htpasswd", "npm:10.3.1"],
+            ["verdaccio-htpasswd", "npm:10.4.0"],
             ["verdaccio-memory", "npm:10.3.0"]
           ],
           "linkType": "SOFT",
@@ -18201,7 +18201,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["validator", "npm:13.7.0"],
             ["verdaccio-audit", "npm:10.2.2"],
             ["verdaccio-auth-memory", "npm:10.2.0"],
-            ["verdaccio-htpasswd", "npm:10.3.1"],
+            ["verdaccio-htpasswd", "npm:10.4.0"],
             ["verdaccio-memory", "npm:10.3.0"]
           ],
           "linkType": "SOFT",
@@ -18231,10 +18231,10 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
         }]
       ]],
       ["verdaccio-htpasswd", [
-        ["npm:10.3.1", {
-          "packageLocation": "./.yarn/cache/verdaccio-htpasswd-npm-10.3.1-3556ea6233-dbd8230d6a.zip/node_modules/verdaccio-htpasswd/",
+        ["npm:10.4.0", {
+          "packageLocation": "./.yarn/cache/verdaccio-htpasswd-npm-10.4.0-045bc61722-1ea4dd6816.zip/node_modules/verdaccio-htpasswd/",
           "packageDependencies": [
-            ["verdaccio-htpasswd", "npm:10.3.1"],
+            ["verdaccio-htpasswd", "npm:10.4.0"],
             ["@verdaccio/file-locking", "npm:10.3.0"],
             ["apache-md5", "npm:1.1.7"],
             ["bcryptjs", "npm:2.4.3"],

conf/default.yaml

@@ -55,6 +55,10 @@ auth:
     # Maximum amount of users allowed to register, defaults to "+inf".
     # You can set this to -1 to disable registration.
     # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10
 
 # https://verdaccio.org/docs/configuration#uplinks
 # a list of other known repositories we can talk to

conf/docker.yaml

@@ -59,6 +59,10 @@ auth:
     # Maximum amount of users allowed to register, defaults to "+infinity".
     # You can set this to -1 to disable registration.
     # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10
 
 # https://verdaccio.org/docs/configuration#uplinks
 # a list of other known repositories we can talk to

package.json

@@ -59,7 +59,7 @@
     "semver": "7.3.7",
     "validator": "13.7.0",
     "verdaccio-audit": "10.2.2",
-    "verdaccio-htpasswd": "10.3.1"
+    "verdaccio-htpasswd": "10.4.0"
   },
   "devDependencies": {
     "@babel/cli": "7.17.10",