Method _hash_password

auth_manager.py:192–202

Hash a password with PBKDF2-SHA256. Returns (hash_hex, salt_hex).

(password: str, salt: bytes = None)

    @staticmethod
    def _hash_password(password: str, salt: bytes = None) -> tuple:
        """Hash a password with PBKDF2-SHA256. Returns (hash_hex, salt_hex)."""
        if salt is None:
            salt = secrets.token_bytes(32)
        pw_hash = hashlib.pbkdf2_hmac(
            'sha256',
            password.encode('utf-8'),
            salt,
            AuthManager.PBKDF2_ITERATIONS
        )
        return pw_hash.hex(), salt.hex()

    @staticmethod
    def _verify_password(password: str, stored_hash: str, stored_salt: str) -> bool: