search

FoundYourStuff / core

0 stars 0 forks source link

Securely storing user passwords #49

Open Arsh25 opened 3 years ago

Arsh25 commented 3 years ago

Currently, the API takes a plaintext password and just slaps it into the Database. This is bad and we should look into storing passwords securely. Flask-Login is sorta the standard way to do this in the Flask ecosystem.

Arsh25 commented 3 years ago

We may just want to stick with Google login for MVP.

Camology commented 3 years ago

No longer MVP as we are not handling passwords on our end, only using login with google for the time being.