Currently the app uses passport, passport-local, and passport-local-mongoose to create and store usernames and hashed passwords. However users can't reset their password, get emails for authentication, etc.
Recommended to update how accounts are handled in order to remove password storage from this site, and make user accounts more secure.
Currently the app uses
passport
,passport-local
, andpassport-local-mongoose
to create and store usernames and hashed passwords. However users can't reset their password, get emails for authentication, etc.Recommended to update how accounts are handled in order to remove password storage from this site, and make user accounts more secure.
Ideas: