auth.ts

@@ -1,12 +1,12 @@
 import getEnv from "@/lib/env-entry"
-import CryptoJS from "crypto-js"
+import bcrypt from "bcrypt"
 import NextAuth from "next-auth"
 import CredentialsProvider from "next-auth/providers/credentials"
 
 export const { handlers, signIn, signOut, auth } = NextAuth({
   secret:
     process.env.AUTH_SECRET ??
-    CryptoJS.MD5(`this_is_nezha_dash_web_secret_${getEnv("SitePassword")}`).toString(),
+    bcrypt.hashSync(`this_is_nezha_dash_web_secret_${getEnv("SitePassword")}`, 10),
   trustHost: (process.env.AUTH_TRUST_HOST as boolean | undefined) ?? true,
   providers: [
     CredentialsProvider({

package.json

@@ -1,6 +1,6 @@
 {
   "name": "nezha-dash",
-  "version": "2.9.1",
+  "version": "2.9.0",
   "private": true,
   "scripts": {
     "dev": "next dev -p 3040",
@@ -26,10 +26,12 @@
     "@radix-ui/react-switch": "^1.1.3",
     "@radix-ui/react-tooltip": "^1.1.8",
     "@trivago/prettier-plugin-sort-imports": "^5.2.2",
+    "@types/bcrypt": "^5.0.2",
     "@types/crypto-js": "^4.2.2",
     "@types/d3-geo": "^3.1.0",
     "@types/luxon": "^3.4.2",
     "babel-plugin-react-compiler": "^19.0.0-beta-e552027-20250112",
+    "bcrypt": "^5.1.1",
     "caniuse-lite": "^1.0.30001707",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
@@ -41,7 +43,7 @@
     "flag-icons": "^7.3.2",
     "i18n-iso-countries": "^7.14.0",
     "lucide-react": "^0.474.0",
-    "luxon": "^3.6.0",
+    "luxon": "^3.5.0",
     "maxmind": "^4.3.24",
     "next": "^15.2.4",
     "next-auth": "^5.0.0-beta.25",
@@ -62,12 +64,12 @@
   "devDependencies": {
     "@biomejs/biome": "1.9.4",
     "@next/bundle-analyzer": "^15.2.4",
-    "@tailwindcss/postcss": "^4.0.16",
+    "@tailwindcss/postcss": "^4.0.15",
     "@types/node": "^22.13.13",
     "@types/react": "^19.0.12",
     "@types/react-dom": "^19.0.4",
     "postcss": "^8.5.3",
-    "tailwindcss": "^4.0.16",
+    "tailwindcss": "^4.0.15",
     "typescript": "^5.8.2",
     "vercel": "^41.4.1"
   },