feat: added argon2 for password encryption

Author: Tony133

package.json

@@ -35,7 +35,7 @@
     "@nestjs/swagger": "^11.1.5",
     "@nestjs/typeorm": "^11.0.0",
     "ajv": "^8.17.1",
-    "bcrypt": "^5.1.1",
+    "argon2": "^0.43.0",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "dotenv": "^16.5.0",
@@ -55,7 +55,6 @@
     "@nestjs/cli": "^11.0.7",
     "@nestjs/schematics": "^11.0.5",
     "@nestjs/testing": "^11.1.0",
-    "@types/bcrypt": "^5.0.2",
     "@types/jest": "^29.5.14",
     "@types/node": "^22.15.2",
     "@types/nodemailer": "^6.4.17",
@@ -111,7 +110,7 @@
     "onlyBuiltDependencies": [
       "@nestjs/core",
       "@scarf/scarf",
-      "bcrypt"
+      "argon2"
     ]
   }
 }

pnpm-lock.yaml

@@ -1,14 +1,14 @@
 import { Test, TestingModule } from '@nestjs/testing';
-import { BcryptService } from './bcrypt.service';
+import { Argon2Service } from './argon2.service';
 
-describe('BcryptService', () => {
-  let service: BcryptService;
+describe('Argon2Service', () => {
+  let service: Argon2Service;
 
   beforeEach(async () => {
     const module: TestingModule = await Test.createTestingModule({
       providers: [
         {
-          provide: BcryptService,
+          provide: Argon2Service,
           useValue: {
             hash: jest.fn(),
             compare: jest.fn(() => true),
@@ -17,7 +17,7 @@ describe('BcryptService', () => {
       ],
     }).compile();
 
-    service = module.get<BcryptService>(BcryptService);
+    service = module.get<Argon2Service>(Argon2Service);
   });
 
   it('should be defined', () => {

src/common/hashing/bcrypt.service.spec.ts renamed to src/common/hashing/argon2.service.spec.ts

@@ -0,0 +1,21 @@
+import { Injectable } from '@nestjs/common';
+import * as argon2 from 'argon2';
+import { HashingService } from './hashing.service';
+
+@Injectable()
+export class Argon2Service implements HashingService {
+  private readonly options = {
+    type: argon2.argon2id,
+    memoryCost: 2 ** 16,
+    timeCost: 3,
+    parallelism: 1,
+  };
+
+  public async hash(data: string | Buffer): Promise<string> {
+    return await argon2.hash(data, this.options);
+  }
+
+  public compare(data: string | Buffer, encrypted: string): Promise<boolean> {
+    return argon2.verify(encrypted, data);
+  }
+}

src/common/hashing/argon2.service.ts

@@ -1,5 +1,5 @@
 import { Test, TestingModule } from '@nestjs/testing';
-import { BcryptService } from './bcrypt.service';
+import { Argon2Service } from './argon2.service';
 import { HashingService } from './hashing.service';
 
 describe('HashingService', () => {
@@ -10,7 +10,7 @@ describe('HashingService', () => {
       providers: [
         {
           provide: HashingService,
-          useClass: BcryptService,
+          useClass: Argon2Service,
         },
       ],
     }).compile();

src/common/hashing/bcrypt.service.ts

@@ -5,7 +5,7 @@ import { TypeOrmModule } from '@nestjs/typeorm';
 import { Users } from '../../users/models/users.model';
 import { UsersService } from '../../users/users.service';
 import { MailerModule } from '../../common/mailer/mailer.module';
-import { BcryptService } from '../../common/hashing/bcrypt.service';
+import { Argon2Service } from '../../common/hashing/argon2.service';
 import { HashingService } from '../../common/hashing/hashing.service';
 import { APP_GUARD } from '@nestjs/core';
 import { AuthenticationGuard } from '../login/guards/authentication/authentication.guard';
@@ -25,7 +25,7 @@ import { provideUsersRepository } from '../../users/repositories/users.repositor
   providers: [
     {
       provide: HashingService,
-      useClass: BcryptService,
+      useClass: Argon2Service,
     },
     {
       provide: APP_GUARD,

src/common/hashing/hashing.service.spec.ts

@@ -2,7 +2,7 @@ import { Module } from '@nestjs/common';
 import { ForgotPasswordService } from './forgot-password.service';
 import { ForgotPasswordController } from './forgot-password.controller';
 import { TypeOrmModule } from '@nestjs/typeorm';
-import { BcryptService } from '../../common/hashing/bcrypt.service';
+import { Argon2Service } from '../../common/hashing/argon2.service';
 import { HashingService } from '../../common/hashing/hashing.service';
 import { MailerModule } from '../../common/mailer/mailer.module';
 import { UtilsModule } from '../../common/utils/utils.module';
@@ -15,7 +15,7 @@ import { UsersService } from '../../users/users.service';
   providers: [
     {
       provide: HashingService,
-      useClass: BcryptService,
+      useClass: Argon2Service,
     },
     ForgotPasswordService,
     UsersService,

src/iam/change-password/change-password.module.ts

@@ -7,7 +7,7 @@ import { JwtModule } from '@nestjs/jwt';
 import { UsersService } from '../../users/users.service';
 import { ConfigModule } from '@nestjs/config';
 import { HashingService } from '../../common/hashing/hashing.service';
-import { BcryptService } from '../../common/hashing/bcrypt.service';
+import { Argon2Service } from '../../common/hashing/argon2.service';
 import { APP_GUARD } from '@nestjs/core';
 import { AuthenticationGuard } from './guards/authentication/authentication.guard';
 import { AccessTokenGuard } from './guards/access-token/access-token.guard';
@@ -23,7 +23,7 @@ import { provideUsersRepository } from '../../users/repositories/users.repositor
   providers: [
     {
       provide: HashingService,
-      useClass: BcryptService,
+      useClass: Argon2Service,
     },
     {
       provide: APP_GUARD,

src/iam/forgot-password/forgot-password.module.ts

@@ -1,6 +1,6 @@
 import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
-import { BcryptService } from '../../common/hashing/bcrypt.service';
+import { Argon2Service } from '../../common/hashing/argon2.service';
 import { HashingService } from '../../common/hashing/hashing.service';
 import { MailerModule } from '../../common/mailer/mailer.module';
 import { Users } from '../../users/models/users.model';
@@ -15,7 +15,7 @@ import { provideUsersRepository } from '../../users/repositories/users.repositor
   providers: [
     {
       provide: HashingService,
-      useClass: BcryptService,
+      useClass: Argon2Service,
     },
     RegisterService,
     UsersService,

src/iam/login/login.module.ts

@@ -16,6 +16,6 @@ export class Users {
   })
   email: string;
 
-  @Column({ length: 60 })
+  @Column({ length: 255 })
   password: string;
 }

src/iam/register/register.module.ts

@@ -4,7 +4,7 @@ import { Users } from './models/users.model';
 import { UsersService } from './users.service';
 import { UsersController } from './users.controller';
 import { MailerModule } from '../common/mailer/mailer.module';
-import { BcryptService } from '../common/hashing/bcrypt.service';
+import { Argon2Service } from '../common/hashing/argon2.service';
 import { HashingService } from '../common/hashing/hashing.service';
 import { provideUsersRepository } from './repositories/users.repository.provider';
 
@@ -14,7 +14,7 @@ import { provideUsersRepository } from './repositories/users.repository.provider
   providers: [
     {
       provide: HashingService,
-      useClass: BcryptService,
+      useClass: Argon2Service,
     },
     UsersService,
     ...provideUsersRepository(),

src/users/models/users.model.ts

@@ -1,6 +1,6 @@
 import { HttpException, NotFoundException } from '@nestjs/common';
 import { Test, TestingModule } from '@nestjs/testing';
-import { BcryptService } from '../common/hashing/bcrypt.service';
+import { Argon2Service } from '../common/hashing/argon2.service';
 import { HashingService } from '../common/hashing/hashing.service';
 import { UserDto } from './dto/user.dto';
 import { UsersService } from './users.service';
@@ -78,7 +78,7 @@ describe('UsersService', () => {
         UsersService,
         {
           provide: HashingService,
-          useClass: BcryptService,
+          useClass: Argon2Service,
         },
         {
           provide: USERS_REPOSITORY_TOKEN,