finos / a11y-theme-builder

DesignOps toolchain theme builder for accessibility inclusion using Atomic Design.
Apache License 2.0
43 stars 70 forks source link

[REQUEST] Hashing should be done for storing the password #863

Open Photon3009 opened 5 months ago

Photon3009 commented 5 months ago

Suggestion/Concern

Storing passwords in plain text, as done in the AuthMiddleware with the users object, is highly insecure and not recommended for real-world applications. In a production environment, passwords should be hashed and compared against hashed values.

Proposed Solution

Instead of storing passwords in plain text, use a secure hashing algorithm (such as bcrypt or Argon2) to hash the passwords before storing them in the database. Hashing ensures that even if the database is compromised, the passwords remain secure.

aaronreed708 commented 5 months ago

Thank you for the recommendation!