gustafl / lexeme

A new take on language learning.
1 stars 0 forks source link

Design login with hash and salt #137

Open gustafl opened 6 years ago

gustafl commented 6 years ago

Hash and salt appears to be the way to go. I need to read up on how to do it properly. The site needs its own login method, apart from others (Google, Facebook etc.) we want to support.

https://crackstation.net/hashing-security.htm https://ciphertrick.com/2016/01/18/salt-hash-passwords-using-nodejs-crypto/ https://github.com/jedisct1/libsodium

gustafl commented 6 years ago

Consider starting with Basic Authentication and HTTPS using cert from LetsEncrypt. https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication https://www.npmjs.com/package/greenlock https://git.coolaj86.com/coolaj86/greenlock-express.js