squirrel-labs / ratatosk

Rask is a platformer game built with WASM and Rust
https://rask.rocks
MIT License
15 stars 1 forks source link

Implement sensible password and auth management #86

Open TrueDoctor opened 4 years ago

TrueDoctor commented 4 years ago

Is your feature request related to a problem? Please describe. Security

Describe the solution you'd like Clients should retrieve a salt from the database, combine it with the password and send the SHA-2 hashed result back to the server.

Describe alternatives you've considered Sending passwords as plaintext and hashing them when they arrive at the server