julien 6245d1eabd fix(auth): replace fixed-salt bcrypt with HMAC-SHA256 for API key hashing ...

bcrypt with a fixed salt is deterministic but defeats the purpose of
bcrypt salting. API keys are high-entropy UUIDs (128 bits), making
brute-force resistance unnecessary — HMAC-SHA256 with the app secret
is the correct primitive for deterministic, secure key hashing.

Also fixes application.author.id → application.authorId in the API key
auth path, which was silently setting req.payload.id to undefined.

2026-04-26 20:31:06 +02:00

..

asyncHandler.js

Mise à jour de controleurs, models et routes

2025-08-19 05:13:24 +02:00

auth.js

fix(auth): replace fixed-salt bcrypt with HMAC-SHA256 for API key hashing

2026-04-26 20:31:06 +02:00

exceptions.handler.js

feat(tests): add Jest+Supertest infrastructure with jump route suite (14 tests)

2026-04-26 01:23:01 +02:00