Poor performance of bcrypt for password verification

[muhammadyusuf-kurbonov]

I noticed that password verification runs for more than 1 sec. Only verification. Also, I have made a test of bcrypt. The same 1 second. So will you use another library or do something with performance? Thank you for your attention

[pdfowler]

We ran into a similar issue and found that the default hash function in authentication-local was taking a very long time. We came up with the following customHasher:

export async function customHasher(password: string) {
  const salt = await bcrypt.genSalt(BCRYPT_WORK_FACTOR_BASE);
  return await bcrypt.hash(password, salt);
}

This was a problem we saw on signup, not verification; but I suspect the two issues are related