Skip to content

docs: document firebase scrypt password hash migration - #1515

Merged
xiaoyijun merged 3 commits into
masterfrom
xiaoyijun-docs-firebase-scrypt-migration
Oct 13, 2026
Merged

xiaoyijun merged 3 commits into
masterfrom
xiaoyijun-docs-firebase-scrypt-migration

Conversation

@xiaoyijun

@xiaoyijun xiaoyijun commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Add a "Firebase scrypt support" section to the user migration guide, documenting the firebase-scrypt Legacy algorithm added in logto-io/logto#8504. It mirrors the existing PBKDF2 section.

  • passwordDigest format: ["firebase-scrypt", [salt, signer_key, salt_separator, rounds, mem_cost, "@"], passwordHash], matching the arg order in packages/core/src/utils/firebase-scrypt.ts
  • Says where each value comes from: per-user salt / passwordHash from firebase auth:export, project-wide hash parameters from the Firebase console
  • Notes that the stored hash must be standard base64, since the Firebase Admin SDK returns URL-safe base64 and a mismatch makes every sign-in fail silently
  • Example payload uses the test vector from password.test.ts

Testing

Tested locally: verified the example digest against the core test vector (password user1password).

🤖 Generated with Claude Code

@xiaoyijun
xiaoyijun requested a review from a team October 9, 2026 13:43
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Deploying logto-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 6a2bf31
Status: ✅  Deploy successful!
Preview URL: https://e2dff92e.logto-docs.pages.dev
Branch Preview URL: https://xiaoyijun-docs-firebase-scry.logto-docs.pages.dev

View logs

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Deploying logto-docs-tutorials with  Cloudflare Pages  Cloudflare Pages

Latest commit: 6a2bf31
Status: ✅  Deploy successful!
Preview URL: https://5f9d8c16.logto-docs-tutorials.pages.dev
Branch Preview URL: https://xiaoyijun-docs-firebase-scry.logto-docs-tutorials.pages.dev

View logs

Comment thread docs/user-management/user-migration.mdx Outdated
Use compact JSON in the example and note the 256-character limit, and
explain how to handle users exported without a scrypt hash.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@xiaoyijun
xiaoyijun merged commit 506ae4e into master Oct 13, 2026
19 checks passed
@xiaoyijun
xiaoyijun deleted the xiaoyijun-docs-firebase-scrypt-migration branch October 13, 2026 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants