feat: integrate passwap for human user password hashing (#6196)

* feat: use passwap for human user passwords

* fix tests

* passwap config

* add the event mapper

* cleanup query side and api

* solve linting errors

* regression test

* try to fix linter errors again

* pass systemdefaults into externalConfigChange migration

* fix: user password set in auth view

* pin passwap v0.2.0

* v2: validate hashed password hash based on prefix

* resolve remaining comments

* add error tag and translation for unsupported hash encoding

* fix unit test

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>

cmd/setup/config_change.go

@@ -17,6 +17,7 @@ type externalConfigChange struct {
 	currentExternalDomain string
 	currentExternalSecure bool
 	currentExternalPort   uint16
+	defaults              systemdefaults.SystemDefaults
 }
 
 func (mig *externalConfigChange) SetLastExecution(lastRun map[string]interface{}) {
@@ -35,7 +36,7 @@ func (mig *externalConfigChange) Check() bool {
 func (mig *externalConfigChange) Execute(ctx context.Context) error {
 	cmd, err := command.StartCommands(
 		mig.es,
-		systemdefaults.SystemDefaults{},
+		mig.defaults,
 		nil,
 		nil,
 		nil,

cmd/setup/setup.go

@@ -104,6 +104,7 @@ func Setup(config *Config, steps *Steps, masterKey string) {
 			ExternalDomain: config.ExternalDomain,
 			ExternalPort:   config.ExternalPort,
 			ExternalSecure: config.ExternalSecure,
+			defaults:       config.SystemDefaults,
 		},
 		&projectionTables{
 			es:      eventstoreClient,