PasswordHashingStrategy

@vendure/core Sourcev1.3.0

Defines how sensitive user credentials like passwords and API-Keys get hashed.

Was this chapter helpful?

Report Issue

Edited Feb 23, 2026·View source

Sign in

PasswordHashingStrategy

@vendure/core Sourcev1.3.0

Defines how sensitive user credentials like passwords and API-Keys get hashed.

Was this chapter helpful?

Report Issue

Edited Feb 23, 2026·View source

Config

Hashing for passwords when using the NativeAuthenticationStrategy can be configured via the authOptions.passwordHashingStrategy property of your VendureConfig.

Hashing for API-Keys can be configured via the ApiKeyStrategy, more specifically authOptions.adminApiKeyStrategy.hashingStrategy and authOptions.shopApiKeyStrategy.hashingStrategy.

Signature

interface PasswordHashingStrategy extends InjectableStrategy {    hash(plaintext: string): Promise<string>;    check(plaintext: string, hash: string): Promise<boolean>;}

Extends: InjectableStrategy

hash

method(plaintext: string) => Promise<string>

check

method(plaintext: string, hash: string) => Promise<boolean>