8d3bab6a89
Monorepo Turborepo (pnpm workspaces) avec 3 packages :
- apps/web : SPA React 19 + Vite 8 + Tailwind v4 (CSS-first)
• TanStack Router (file-based, auto code-splitting), Query, Form
• Radix primitives bruts + CVA + clsx + tailwind-merge
• MSW pour mocker l'API tant qu'Adonis n'est pas branché
• Polices Bricolage Grotesque + Inter self-hostées via fontsource
• Tokens marque (rubis, cream, ink) exposés via @theme
• Primitives maison : Gem, Brand, Eyebrow, Button, Input, Field
• Route /login full flow : TanStack Form + Zod + mutation Query
- apps/api : Adonis 7 (kit api, scaffold via create-adonisjs)
• Auth access tokens (Bearer) — cf. ADR-017
• Tuyau core déjà câblé pour la génération de types
• Routes /api/v1/auth/{signup,login} + /api/v1/account/{profile,logout}
• Minimal — uniquement le pont front ↔ back
- packages/shared : types TS + schemas Zod + constantes
• Source unique de vérité partagée api ↔ web
• Domaines : User, Org, Auth, Client, Invoice, Plan
Tooling racine : Turbo, ESLint v9 flat, Prettier, husky, lint-staged.
CLAUDE.md et docs/decisions.md mis à jour avec ADR-014 à ADR-018
(stack, monorepo, PG existant, Bearer tokens, MinIO existant)
et le pointeur vers docs/tech/architecture.md.
Logo Rubis déplacé de landing/assets/ vers /assets/ (source unique
réutilisée par la landing et l'app).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
76 lines
2.2 KiB
TypeScript
76 lines
2.2 KiB
TypeScript
import { defineConfig, drivers } from '@adonisjs/core/hash'
|
|
|
|
/**
|
|
* Hashing configuration.
|
|
*
|
|
* This starter uses Node.js scrypt under the hood.
|
|
* Node.js reference: https://nodejs.org/api/crypto.html#cryptoscryptpassword-salt-keylen-options-callback
|
|
*/
|
|
const hashConfig = defineConfig({
|
|
/**
|
|
* Default hasher used by the application.
|
|
*/
|
|
default: 'scrypt',
|
|
|
|
list: {
|
|
/**
|
|
* Scrypt is memory-hard, which makes brute-force attacks more expensive.
|
|
*/
|
|
scrypt: drivers.scrypt({
|
|
/**
|
|
* Work factor (Node alias: N / cost).
|
|
* Higher values increase security and CPU+memory usage.
|
|
*
|
|
* Tuning guideline:
|
|
* - Start with 16384.
|
|
* - Increase gradually (for example 32768) and benchmark login/signup latency.
|
|
* - Keep values practical for your slowest production machine.
|
|
*
|
|
* Node constraint: value must be a power of two greater than 1.
|
|
*/
|
|
cost: 16384,
|
|
|
|
/**
|
|
* Block size (Node alias: r / blockSize).
|
|
* Increases memory and CPU linearly.
|
|
*
|
|
* Tuning guideline:
|
|
* - Keep 8 unless you have a measured reason to change it.
|
|
* - Raise only with benchmark data, because memory usage grows quickly.
|
|
*/
|
|
blockSize: 8,
|
|
|
|
/**
|
|
* Parallelization (Node alias: p / parallelization).
|
|
* Controls how many independent computations are performed.
|
|
*
|
|
* Tuning guideline:
|
|
* - Keep 1 for most applications.
|
|
* - Increase only after load testing if your infrastructure benefits from it.
|
|
*/
|
|
parallelization: 1,
|
|
|
|
/**
|
|
* Maximum memory limit in bytes (Node alias: maxmem / maxMemory).
|
|
* Hashing throws if the estimated memory usage is above this limit.
|
|
* Node documents the check as approximately: 128 * N * r > maxmem.
|
|
*
|
|
* Tuning guideline:
|
|
* - Keep this aligned with your cost/blockSize choices.
|
|
* - Increase carefully on memory-constrained environments.
|
|
*/
|
|
maxMemory: 33554432,
|
|
}),
|
|
},
|
|
})
|
|
|
|
export default hashConfig
|
|
|
|
/**
|
|
* Inferring types for the list of hashers you have configured
|
|
* in your application.
|
|
*/
|
|
declare module '@adonisjs/core/types' {
|
|
export interface HashersList extends InferHashers<typeof hashConfig> {}
|
|
}
|