lasdf1234 opened a new issue, #13341: URL: https://github.com/apache/gravitino/issues/13341
## What would you like to be improved? Built-in IdP Basic authentication uses SHA3-512 password stretching with **100,000** iterations. On typical server hardware, a single password verify takes about **~39 ms**, which adds noticeable latency to every Basic-auth request (login, API calls with `Authorization: Basic ...`). ## How should we improve? Reduce the default iteration count to **10,000** (one tenth of the current value). Password hashing dominates verify time, so latency should drop proportionally (local benchmark: **~5.4 ms** per verify after the change). **Breaking change:** Hashes stored with `i=100000` are not accepted after upgrade. Existing IdP users must reset their passwords. Suggested changes: - Update `Sha3512Defaults.DEFAULT_ITERATIONS` from `100_000` to `10_000` - Reject legacy `i=100000` PHC strings on verify - Update `design-docs/gravitino-local-authentication.md` example - Add unit test coverage for legacy iteration rejection -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
