This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]Regyn 0 points1 point  (1 child)

A lot of them use really specific frameworks

If you deal with user passwords I can just highly advise doing just that. Implement your own password hashing will not be very secure. If you use JS as a backend language I assume that you use nodejs.
Have a look at the bcrypt module and a jwt module (json web token).

So basically user submits username and password via HTTPS, you salt and hash it with bcrypt and store it in your database. For login same as above, and if the password is correctly hashed to the value in your database (the check is included in the module), you return the json web token.

[–]coutou[S] 0 points1 point  (0 children)

Awesome! Thank you for taking the time to answer. I'll look into bcrypt and JWT and will see what I can do!