TSphinxConfig.PasswordHasher Property
Gets or sets the password hasher used to hash and verify user passwords.
Remarks
Assign an object implementing IPasswordHasher to replace the built-in password hashing algorithm with your own (for example PBKDF2, bcrypt, argon2 or a TMS Cryptography Pack based one). When left unassigned (nil, the default), Sphinx uses its built-in TDefaultPasswordHasher (salted SHA-256), so existing applications are unaffected.
Sphinx only ever calls HashPassword and VerifyHashedPassword through this interface, so a custom implementation is dropped in without any other change. The instance is shared across concurrent requests, so it must be stateless / thread-safe (as the built-in one is).
If you already have users whose passwords were hashed by the built-in hasher, make your custom VerifyHashedPassword recognize the legacy stored format and fall back to TDefaultPasswordHasher for it; otherwise those users would no longer be able to sign in.
Syntax
Unit: Sphinx.Comp.Config
property TSphinxConfig.PasswordHasher: IPasswordHasher