fz-mirrors/AstrBot
1
0
Fork 0
mirror of https://github.com/AstrBotDevs/AstrBot synced 2026-07-20 02:55:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): increase PBKDF2 iterations

Browse Source
This commit is contained in:
Soulter
2026-04-04 15:34:33 +08:00
parent a3abb28ce3
commit b749f62e90
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
astrbot/core/utils/auth_password.py
View File

@@ -5,7 +5,7 @@ import hmac
import re
import secrets
_PBKDF2_ITERATIONS = 200_000
_PBKDF2_ITERATIONS = 600_000
_PBKDF2_SALT_BYTES = 16
_PBKDF2_ALGORITHM = "pbkdf2_sha256"
_PBKDF2_FORMAT = f"{_PBKDF2_ALGORITHM}$"

2
dashboard/src/i18n/locales/en-US/core/header.json
View File

@@ -90,7 +90,7 @@
"passwordHint": "At least 12 characters, including uppercase, lowercase letters, and digits",
"confirmPasswordHint": "Please enter new password again to confirm",
"usernameHint": "Leave blank to keep current username",
"defaultCredentials": "The new AstrBot version has improved security. Please change your password."
"defaultCredentials": "The default username and password are astrbot. Please change them immediately after logging in to ensure security."
},
"validation": {
"passwordRequired": "Please enter password",

2
dashboard/src/i18n/locales/ru-RU/core/header.json
View File

@@ -90,7 +90,7 @@
"passwordHint": "Не менее 12 символов, включая заглавные и строчные буквы, а также цифры",
"confirmPasswordHint": "Введите новый пароль еще раз",
"usernameHint": "Оставьте пустым, если не хотите менять имя пользователя",
"defaultCredentials": "Новая версия AstrBot улучшила безопасность. Пожалуйста, измените пароль."
"defaultCredentials": "Имя пользователя и пароль по умолчанию — astrbot. Пожалуйста, измените их сразу после входа для обеспечения безопасности."
},
"validation": {
"passwordRequired": "Введите пароль",