node-opcua / node-opcua / 28810583191

92%

Build Type

push

github

Committed by erossignon

Commit Message

fix(role-set): address CoPilot review on password-hasher PR

- password_hasher: bound scrypt work factors (ln/r/p) parsed from a stored
  credential so a tampered/poisoned PHC string can't force an absurd
  scryptSync cost; parseScrypt fails closed (verify() returns false).
- install_role_based_security: reject seeding a user with BOTH password and
  passwordHash, and validate the effective UserConfigurationMask on the
  pre-hashed path (importUsers bypasses addUser's validation).
- install_role_based_security: attach a .catch() to the background
  persistence.save() on credential upgrade so a failed flush can't become a
  process-level unhandled rejection; log via node-opcua-debug errorLog
  (message only — a minified stack is noise).
- tests: cover scrypt bounds hardening and the two new seeding rejections.

Coverage Stats

19910 of 23199 branches covered (85.82%)

47 of 58 new or added lines in 4 files covered. (81.03%)

25 existing lines in 5 files now uncovered.

169141 of 183534 relevant lines covered (92.16%)

442505.85 hits per line