From 387da736e1ad28c3f54b5a0cfff3e0c77ed30b69 Mon Sep 17 00:00:00 2001
From: Codex <codex@localhost>
Date: Mon, 20 Jul 2026 15:58:23 +0800
Subject: [PATCH] fix: cap PBKDF2 iterations for Cloudflare Workers

---
 lib/server/auth-helpers.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/server/auth-helpers.ts b/lib/server/auth-helpers.ts
index 9a2ded9..e153d8f 100644
--- a/lib/server/auth-helpers.ts
+++ b/lib/server/auth-helpers.ts
@@ -87,7 +87,8 @@ export function shouldUseSecureSessionCookie(request?: SessionCookieProtocolRequ
   return request.nextUrl.protocol === 'https:';
 }
 
-const PBKDF2_ITERATIONS = 120_000;
+// Cloudflare Workers rejects PBKDF2 iteration counts above 100,000.
+const PBKDF2_ITERATIONS = 100_000;
 const PBKDF2_KEY_BYTES = 32;
 const SESSION_TOKEN_VERSION = 'v1';