Encrypt password on the frontend before sending the request. Closes #2

[geakstr]

Encrypt user password with bcrypt and send this to server while login/register

Included new function ./js/utils/salt.js for generate static salt by seed. Uses for generating salt by username

[mxstbr]

Thanks so much, I'll take a look soon!

[geakstr]

I think demo will stop working, because users localstorage will contain unencrypted passwords

[mxstbr]

Oh yeah actually, that might happen. What could we do to circumvent that?

[mxstbr]

I just tried it, and indeed as expected, previously registered password don't work. (e.g. the default username/password combination throws a "wrong password" error)

Any ideas how we could work around that?

[geakstr]

I don't see a good solution. Maybe set flag in localstorage: if flag not exist — clear storage. Or move from localstorage to in-memory storage.

[mxstbr]

Yeah, a flag might be a good way to go. Would you mind adding that?

[geakstr]

Ok, I'll do it :)

[mxstbr]

I just merged #6 and now we have some conflicts, would you mind resolving them? :+1:

[geakstr]

@mxstbr fixed

[mxstbr]

Thanks for the great PR, much appreciated!

[geakstr]

Very nice!