- Username and Password only
document find on DB collection - Encrypted password
Usedmongoose-encryption
- A Simple Encryption and Authentication for mongoose documents which takes a custom string to encrypt a password. Even if someone gains access to the database, they will not be able to view the encrypted fields without the decryption key. - Hashing with md5
Usedmd5
- MD5 (Message Digest Method 5) is a cryptographic hash algorithm used to generate a 128-bit digest from a string of any length. - Hashing and Salting with bcrypt
Usedbcrypt
Bcrypt is a password-based key derivation function that uses a slow hash function and a unique salt value to store passwords securely. It hashes a password and salt combination multiple times to make it computationally infeasible for an attacker to guess the original password. - Cookies and Sessions
Usedpassport
,passport-local-mongoose
andexpress session
to validate user sessions - Google OAuth 2.0 Authentication
Usedpassport-google-oauth20
-
Notifications
You must be signed in to change notification settings - Fork 0
jxswxnth/Authentication-Secrets
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
About
Learning Authentication and Security
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published