2 commits

Author	SHA1	Message	Date
rcourtman	ec6133afd8	refactor: Remove duplicate IsPasswordHashed from auth package ... The config package has a more robust IsPasswordHashed function that handles truncated hashes. The auth package had a simpler duplicate that was only used in tests. Removed the duplicate and its test (already covered by config/config_utils_test.go). Reduces deadcode findings from 7 to 6.	2025-12-02 17:19:07 +00:00
rcourtman	16d70123bf	test: add unit tests for auth package ... - Test API token generation (uniqueness, format) - Test API token hashing (SHA3-256, deterministic) - Test constant-time token comparison - Test token hash detection - Test password hashing (bcrypt, salted) - Test password verification - Test password complexity validation - Verify bcrypt cost and minimum password length constants	2025-11-26 13:51:13 +00:00