[Authentication] Fixed password hash constants

Authentication/Business/JWT/PasswordHash.cs

@@ -12,6 +12,10 @@ namespace iiie.Authentication.Business.JWT
         private const int SALT_INDEX = 1;
         private const int PBKDF2_INDEX = 2;
 
+        private const int SALT_BYTE_SIZE = 24;
+        private const int HASH_BYTE_SIZE = 42;
+        private const int PBKDF2_ITERATIONS = 2048;
+
         /// <summary>
         /// Crée un hash à partir du password
         /// </summary>
@@ -21,14 +25,13 @@ namespace iiie.Authentication.Business.JWT
         {
             // génaration du SALT aléatoire
             RNGCryptoServiceProvider csprng = new RNGCryptoServiceProvider();
-            byte[] salt = new byte[1024];
+            byte[] salt = new byte[SALT_BYTE_SIZE];
             csprng.GetBytes(salt);
 
             // hash le password et création de la chaine avec les paramêtres
-            byte[] hash = PBKDF2(password, salt, 42, 1024);
-            return 42 + ":" +
+            byte[] hash = PBKDF2(password, salt, PBKDF2_ITERATIONS, HASH_BYTE_SIZE);
+            return PBKDF2_ITERATIONS + ":" +
                 Convert.ToBase64String(salt) + ":" + Convert.ToBase64String(hash);
-            return "";
         }
 
         /// <summary>