Static Salt for API Key Hashing

// api-key.service.ts L12
const apiKeyHashingSalt = "ipump";   // hardcoded, same for ALL keys

// api-key.service.ts L36-L38
public async getByKey(key: string): Promise<ApiKey> {
  const hashedKey = this.hashingService.hash(key, apiKeyHashingSalt);   // static salt used
  return this.apiKeyRepository.findByHash(hashedKey.hash);
}

// hashing.service.ts L10-L18
public hash(input: string, salt: string | undefined): HashResult {
  const iterations = 100000;
  const keyLength = 64;
  const digest = "sha512";
  const saltLength = 32;
  const saltOrRandomSalt = salt ?? randomBytes(saltLength).toString("hex");
  // When salt is provided (always "ipump"), no random salt is generated
  const hash = pbkdf2Sync(input, saltOrRandomSalt, iterations, keyLength, digest).toString("hex");
  return { hash, salt: saltOrRandomSalt };
}