Learning Authentication and Security

• Username and Password only
  document find on DB collection
• Encrypted password
  Used mongoose-encryption - A Simple Encryption and Authentication for mongoose documents which takes a custom string to encrypt a password. Even if someone gains access to the database, they will not be able to view the encrypted fields without the decryption key.
• Hashing with md5
  Used md5 - MD5 (Message Digest Method 5) is a cryptographic hash algorithm used to generate a 128-bit digest from a string of any length.
• Hashing and Salting with bcrypt
  Used bcrypt Bcrypt is a password-based key derivation function that uses a slow hash function and a unique salt value to store passwords securely. It hashes a password and salt combination multiple times to make it computationally infeasible for an attacker to guess the original password.
• Cookies and Sessions
  Used passport, passport-local-mongoose and express session to validate user sessions
• Google OAuth 2.0 Authentication
  Used passport-google-oauth20

Home Page

Register Page

Login Page

Secret Page