Node-Cache token store for Passwordless
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
lib Initial Commit Jun 4, 2016
test
.gitignore
.npmignore
Gruntfile.js
LICENSE Initial commit Jun 4, 2016
README.md
index.js
package.json

README.md

Passwordless-NodeCache

npm version

Node-Cache token store for Passwordless

This module provides token storage for Passwordless, a node.js module for express that allows website authentication without password using verification through email or other means. Visit the project's website https://passwordless.net for more details.

Tokens are stored in memory and are hashed and salted using bcryptjs. As such, tokens will not survive a restart of your application. This implementation is mainly meant for example, proof-of-concepts or perhaps unit testing.

Usage

First, install the module:

$ npm install passwordless-nodecache --save

Afterwards, follow the guide for Passwordless. A typical implementation may look like this:

var passwordless = require('passwordless');
var NodeCacheStore = require('passwordless-nodecache');

passwordless.init(new NodeCacheStore());

passwordless.addDelivery(
    function(tokenToSend, uidToSend, recipient, callback) {
        // Send out a token
    });

app.use(passwordless.sessionSupport());
app.use(passwordless.acceptToken());

Initialization

new NodeCacheStore();

Example:

passwordless.init(new NodeCacheStore());

Hash and salt

As the tokens are equivalent to passwords (even though they do have the security advantage of only being valid for a limited time) they have to be protected in the same way. passwordless-nodecache uses bcryptjs with automatically created random salts. To generate the salt 10 rounds are used.

Tests

$ npm test

License

MIT License

Author

Andrea Falzetti