Passwordless nedbstore
Switch branches/tags
Nothing to show
Clone or download
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
lib
test
.gitignore
.npmignore
Gruntfile.js
LICENSE
README.md
index.js
package.json

README.md

Passwordless-NedbStore

This module provides token storage for Passwordless, a node.js module for express that allows website authentication without password using verification through email or other means. Visit the project's website https://passwordless.net for more details.

Tokens are stored in Nedb and are hashed and salted using bcryptjs.

This is a crude adaption from passwordless-mongostore from Florian Heinemann.

Usage

First, install the module:

$ npm install passwordless-nedbstore --save

Afterwards, follow the guide for Passwordless. A typical implementation may look like this:

var passwordless = require('passwordless');
var NedbStore = require('passwordless-nedbstore');

passwordless.init(new NedbStore('path/to/token.db')); //token.db will be created if it does not exist

passwordless.addDelivery(
    function(tokenToSend, uidToSend, recipient, callback) {
        // Send out a token
    });
    
app.use(passwordless.sessionSupport());
app.use(passwordless.acceptToken());

Initialization

new NedbStore('path/to/token.db'); //token.db will be created if it does not exist
or
new NedbStore(options)); //see nedb options

If a String is given the nedb options - Object will have set its filename and autoload: true

Example for most cases:

passwordless.init(new NedbStore('path/to/token.db')); //token.db will be created if it does not exist

Hash and salt

As the tokens are equivalent to passwords (even though they do have the security advantage of only being valid for a limited time) they have to be protected in the same way. passwordless-nedbstore uses bcryptjs with automatically created random salts. To generate the salt 10 rounds are used.

Tests

$ npm test Since Tests of Nedb are not compatible with multiple instances of the same file, the first instance for every filename is cached! Call it cheating, but I think its good enough!

License

MIT License

Author

Puschkarski Severin has rewritten passwordless-mongostore from Florian Heinemann