search

gobuffalo / buffalo-auth

Buffalo auth plugin helps adding username password authentication to your app
https://gobuffalo.io
MIT License
41 stars 28 forks source link

Feature request: Password salts #78

Closed L1ghtman2k closed 4 years ago

L1ghtman2k commented 4 years ago

Hey,

I was wondering if there are any plans to implement password salting?

paganotoni commented 4 years ago

Hey @L1ghtman2k 👋, I don't think we've discussed adding password salts. Do you have an idea on what would be expected there ? Thanks!

L1ghtman2k commented 4 years ago

After doing some research I realized that buffalo already implements that by default.

generateHash() function uses bcrypt's GenerateFromPassword function which puts both cost, password hash, and the salt into the hash.