Evolutionary-Algorithms-On-Click / Evolutionary-Algorithms-On-Click/auth_microservice

Security: User passwords are unhashed

Open
#21 3 comments 0 reactions 0 assignees View on GitHub
amsoc-accepted enhancement hacktoberfest security
Dominant language
Go
Stars
3
Forks
6
PR merge metrics
No merged PRs in 30d

Description

## Problem
While I was working on the PR #20, I came across this security issue where the passwords are stored in as plain texts rather than being hashed, Which could potentially lead to security issues. Currently we just rely on HTTPs for the protection, If the db is compromised somehow we could potential lose out the user credentials

## Solution
We could raise an issue and work on this security feature by including hashing techniques to keep our site up and running in more secured way.

## Potential Issues
I can think of a potential issue when we try to migrate from plain texts to hashed passwords in db, Since existing users creds are all in stored as unhashed fashion, could be a bit of a challenge to resolve this new migration.

I am ready to work on this issue myself @Ashrockzzz2003, Kindly assign this issue to me if you think of including this feature/fix.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.