Skip to content

用PBKDF2替代bcrypt,以及Windows相容性修正 #5

Merged
merged 2 commits into from Jan 18, 2013

2 participants

@pH200
pH200 commented Jan 18, 2013

拿掉bcrypt並且使用crypto.pbkdf2的原因是去除node-gyp的相依性,減輕設定開發環境的困難,並維持高安全性的加密。

舉例而言,以下環境無法安裝需要compile的npm package:

  • 沒有裝gcc的Linux
  • 沒有裝Xcode command line tools的OS X
  • 沒有裝Visual Studio的Windows

此修改不相容現有的user model(bcrypt hash),並且會在User新增salt欄位

Windows相容性的修改則是更新了mongoose版本,測了一下沒發現什麼問題

@poying poying merged commit 64f4776 into nodejs-tw:master Jan 18, 2013
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.