refactor: use better maintained argon2 instead of bcrypt as hashi…

…ng library

package.json

@@ -46,8 +46,8 @@
     "@sectester/runner": "^0.33.1",
     "@sectester/scan": "^0.33.1",
     "@xmldom/xmldom": "^0.9.2",
+    "argon2": "^0.41.1",
     "axios": "^1.7.7",
-    "bcrypt": "^5.1.1",
     "class-transformer": "^0.5.1",
     "dot": "^1.1.3",
     "dotenv": "^16.4.5",

pg.sql

@@ -9,8 +9,8 @@ create table "product" ("id" serial primary key, "created_at" timestamptz(0) not
 
 set session_replication_role = 'origin';
 --password is admin
-INSERT INTO "user" (created_at, updated_at, email, password, first_name, last_name, is_admin, photo, company, card_number, phone_number, is_basic) VALUES (now(), now(), 'admin', '$2b$10$BBJjmVNNdyEgv7pV/zQR9u/ssIuwZsdDJbowW/Dgp28uws3GmO0Ky', 'admin', 'admin', true, null, 'Brightsec', '1234 5678 9012 3456', '+1 234 567 890', true);
-INSERT INTO "user" (created_at, updated_at, email, password, first_name, last_name, is_admin, photo, company, card_number, phone_number, is_basic) VALUES (now(), now(), 'user', '$2b$10$edsq4aqzAHnrJu68t8GS2.v0Z7hJSstAo7wBBDmmbpjYGxMMTYpVi', 'user', 'user', false, null, 'Brightsec', '1234 5678 9012 3456', '+1 234 567 890', true);
+INSERT INTO "user" (created_at, updated_at, email, password, first_name, last_name, is_admin, photo, company, card_number, phone_number, is_basic) VALUES (now(), now(), 'admin', '$argon2id$v=19$m=65536,t=3,p=4$jmtTCTEcjngErif00RfYAg$biS59Ixnrz+dHeJrJ91ybmHt+4wrVgcH3RXvfaqZtNI', 'admin', 'admin', true, null, 'Brightsec', '1234 5678 9012 3456', '+1 234 567 890', true);
+INSERT INTO "user" (created_at, updated_at, email, password, first_name, last_name, is_admin, photo, company, card_number, phone_number, is_basic) VALUES (now(), now(), 'user', '$argon2id$v=19$m=65536,t=3,p=4$hJX1v2kH3UFlEOhZFZn3RQ$oXDFhwgoxosiunmy720fBEBGiin0XNeTvDlDk3dUAT4', 'user', 'user', false, null, 'Brightsec', '1234 5678 9012 3456', '+1 234 567 890', true);
 
 --insert default products into the table
 INSERT INTO "product" ("created_at", "category", "photo_url", "name", "description") VALUES (now(), 'Healing', '/api/file?path=config/products/crystals/amethyst.jpg&type=image/jpg', 'Amethyst', 'a violet variety of quartz');

src/auth/credentials.utils.ts

@@ -1,11 +1,9 @@
-import { hash, compare } from 'bcrypt';
-
-const SALT_ROUNDS = 10;
+import { hash, verify } from 'argon2';
 
 export const hashPassword = (password: string): Promise<string> =>
-  hash(password, SALT_ROUNDS);
+  hash(password);
 
 export const passwordMatches = (
   password: string,
   hash: string
-): Promise<boolean> => compare(password, hash);
+): Promise<boolean> => verify(hash, password);