Hash the otp code - Githubissues

open-ecommerce-api / store-engine

An ecommerce backend-API created using Django and DRF (Django Rest Framework).

GNU General Public License v3.0

13 stars 10 forks source link

Hash the otp code #101

Open EttiFeyzi opened 1 year ago

EttiFeyzi commented 1 year ago

Currently, our application stores and verifies OTP codes without hashing them. This poses a security risk as an attacker who gains access to the database can potentially use the OTP codes to authenticate as a user.