search

tla / stemmaweb

Catalyst interface and online tools for stemmatology research
13 stars 9 forks source link

Do proper password hashing for email/password accounts #123

Closed tla closed 1 year ago

tla commented 1 year ago

The passwords for email/password login need to be checked server-side (well, middleware-side) against the hashed form stored on Stemmarest.

tla commented 1 year ago

Here is a link to the code in the master branch that shows how the passphrases are encrypted... https://github.com/tla/stemmaweb/blob/e01c1839f5ddf0e4728b810bfe03d6b43e8a1922/lib/Catalyst/Authentication/Store/Neo4p/User.pm#L50

peter-gy commented 1 year ago

Thank you for linking the related code!