Vladimir Zagainov 81c42e1a9a feat: migrate passwords from SHA-256 to bcrypt ...

- Replace SHA-256 hex hashing with bcrypt (cost 10) for password storage
- VerifyPassword now uses bcrypt.CompareHashAndPassword
- HashPassword returns (string, error) instead of string
- Add IsBcryptHash helper to detect legacy hashes for future migration
- Remove duplicate verifyPassword from api.go (already done in prev commit)
- Promote golang.org/x/crypto to direct dependency

2026-05-27 16:31:38 +03:00

12 KiB

Raw Blame History

View Raw