Skip to content

feat: add pepper support to argon2 hashing#34

Merged
Filipo11021 merged 6 commits into
mainfrom
feat/argon2-pepper
Jan 23, 2026
Merged

feat: add pepper support to argon2 hashing#34
Filipo11021 merged 6 commits into
mainfrom
feat/argon2-pepper

Conversation

@Absy00

@Absy00 Absy00 commented Jan 21, 2026

Copy link
Copy Markdown
Collaborator

Note

Introduces optional pepper support to Argon2 hashing and verification.

  • Adds pepper to Argon2 options (validated string length 1–1024) and forwards it as secret to argon2id in createArgon2KeyGenerator
  • Uses defaultOptions.pepper during verify to derive the comparison key
  • Adds tests for correct/mismatched pepper behavior and validation bounds

Written by Cursor Bugbot for commit 6a5daff. This will update automatically on new commits. Configure here.

Comment thread src/argon2/pepper.test.ts
@Filipo11021

Copy link
Copy Markdown
Owner

@cursor review

cursor[bot]

This comment was marked as outdated.

@Absy00

Absy00 commented Jan 23, 2026

Copy link
Copy Markdown
Collaborator Author

@copilot review

Copilot AI commented Jan 23, 2026

Copy link
Copy Markdown

@Absy00 I've opened a new pull request, #35, to work on those changes. Once the pull request is ready, I'll request review from you.

@Filipo11021

Copy link
Copy Markdown
Owner

@cursor review

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

Comment thread src/argon2/argon2.ts Outdated
@Filipo11021 Filipo11021 linked an issue Jan 23, 2026 that may be closed by this pull request
@Filipo11021 Filipo11021 merged commit 4d508df into main Jan 23, 2026
5 checks passed
github-actions Bot pushed a commit that referenced this pull request Jan 23, 2026
# [2.1.0](v2.0.0...v2.1.0) (2026-01-23)

### Features

* add pepper support to argon2 hashing ([#34](#34)) ([4d508df](4d508df))
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 2.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Absy00 pushed a commit that referenced this pull request Jan 26, 2026
# [2.1.0](v2.0.0...v2.1.0) (2026-01-23)

### Features

* add pepper support to argon2 hashing ([#34](#34)) ([4d508df](4d508df))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add pepper support to Argon2 hashing

3 participants