From 86908e1eb4a6cc8f5474b1355db4c104c548619e Mon Sep 17 00:00:00 2001 From: Patrick Heppler <12952240+HepplerDotNet@users.noreply.github.com> Date: Fri, 6 Sep 2019 14:16:32 +0200 Subject: [PATCH] Set argon defaults to prevent password_hash(): Memory cost is outside of allowed memory range on PHP 7.4 (#5094) With the values ```` 'argon' => [ 'memory' => 1024, 'threads' => 2, 'time' => 2, ], ``` Hash::make() produces password_hash(): Memory cost is outside of allowed memory range on PHP 7.4 --- config/hashing.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/config/hashing.php b/config/hashing.php index 84257708..948fd195 100644 --- a/config/hashing.php +++ b/config/hashing.php @@ -44,9 +44,9 @@ */ 'argon' => [ - 'memory' => 1024, - 'threads' => 2, - 'time' => 2, + 'memory' => PASSWORD_ARGON2_DEFAULT_MEMORY_COST, + 'threads' => PASSWORD_ARGON2_DEFAULT_THREADS, + 'time' => PASSWORD_ARGON2_DEFAULT_TIME_COST, ], ];