Safety issue - Githubissues

rasnesakam / emakas-users

0 stars 0 forks source link

Open rasnesakam opened 1 year ago

rasnesakam commented 1 year ago

System has some safety issues

[ ] Some endpoints must be hidden or remove
[x] Password salting algorithm is poor. I need more research and implementations for it

rasnesakam commented 11 months ago

Remove GET: /users endpoint, and change behaviour of DELETE: /users/delete endpoint

rasnesakam commented 10 months ago

Using BCryptPasswordEncoder instead of custom password encoding. And it supports password salting in more secure way!