@rpcbase/server 0.567.0 → 0.569.0

package/dist/index.js

@@ -4381,12 +4381,22 @@ async function hashPassword(password, salt) {
   });
   return derivedKey;
 }
-const DEFAULT_SCRYPT_N = 8192;
-const DEFAULT_SCRYPT_R = 8;
-const DEFAULT_SCRYPT_P = 4;
-const DEFAULT_SCRYPT_KEYLEN = 64;
-const DEFAULT_SCRYPT_SALT_BYTES = 16;
-const DEFAULT_SCRYPT_MAXMEM_BYTES = 256 * 1024 * 1024;
+const PRODUCTION_SCRYPT_PARAMS = {
+  N: 8192,
+  r: 8,
+  p: 4,
+  keylen: 64,
+  saltBytes: 16,
+  maxmemBytes: 256 * 1024 * 1024
+};
+const DEVELOPMENT_SCRYPT_PARAMS = {
+  N: 1024,
+  r: 8,
+  p: 1,
+  keylen: 64,
+  saltBytes: 16,
+  maxmemBytes: 256 * 1024 * 1024
+};
 const MAX_SCRYPT_MAXMEM_BYTES = 1024 * 1024 * 1024;
 const MAX_SCRYPT_N = 1048576;
 const MAX_SCRYPT_R = 64;
@@ -4409,6 +4419,12 @@ const estimateScryptMemoryBytes = ({
 }) => {
   return 128 * r * (N + p);
 };
+const isProductionRuntime = () => {
+  return process.env.NODE_ENV === "production" || globalThis.__rb_env__?.MODE === "production";
+};
+const getDefaultScryptParams = () => {
+  return isProductionRuntime() ? PRODUCTION_SCRYPT_PARAMS : DEVELOPMENT_SCRYPT_PARAMS;
+};
 const validateScryptParams = (params) => {
   const {
     N,
@@ -4471,7 +4487,7 @@ const validateScryptParams = (params) => {
 };
 const getCurrentMaxmemBytes = (opts) => {
   const envMaxmemBytes = parseEnvInt(process.env.RB_PASSWORD_SCRYPT_MAXMEM_BYTES);
-  const maxmemBytes = opts?.maxmemBytes ?? envMaxmemBytes ?? DEFAULT_SCRYPT_MAXMEM_BYTES;
+  const maxmemBytes = opts?.maxmemBytes ?? envMaxmemBytes ?? getDefaultScryptParams().maxmemBytes;
   if (!Number.isSafeInteger(maxmemBytes) || maxmemBytes < 16 * 1024 * 1024 || maxmemBytes > MAX_SCRYPT_MAXMEM_BYTES) {
     throw new Error("invalid_scrypt_maxmem");
   }
@@ -4483,12 +4499,13 @@ const getCurrentScryptParams = (opts) => {
   const envP = parseEnvInt(process.env.RB_PASSWORD_SCRYPT_P);
   const envKeylen = parseEnvInt(process.env.RB_PASSWORD_SCRYPT_KEYLEN);
   const envSaltBytes = parseEnvInt(process.env.RB_PASSWORD_SCRYPT_SALT_BYTES);
+  const defaults = getDefaultScryptParams();
   const params = {
-    N: opts?.N ?? envN ?? DEFAULT_SCRYPT_N,
-    r: opts?.r ?? envR ?? DEFAULT_SCRYPT_R,
-    p: opts?.p ?? envP ?? DEFAULT_SCRYPT_P,
-    keylen: opts?.keylen ?? envKeylen ?? DEFAULT_SCRYPT_KEYLEN,
-    saltBytes: opts?.saltBytes ?? envSaltBytes ?? DEFAULT_SCRYPT_SALT_BYTES,
+    N: opts?.N ?? envN ?? defaults.N,
+    r: opts?.r ?? envR ?? defaults.r,
+    p: opts?.p ?? envP ?? defaults.p,
+    keylen: opts?.keylen ?? envKeylen ?? defaults.keylen,
+    saltBytes: opts?.saltBytes ?? envSaltBytes ?? defaults.saltBytes,
     maxmemBytes: getCurrentMaxmemBytes(opts)
   };
   const validated = validateScryptParams(params);