3 ms·
If this article is to be believed, they are storing user passwords in plaintext.
by andyg_blog 3y ago
If this article is to be believed, they are storing user passwords in plaintext.
- willsmith72 3y agonah, it's hashed and salted. otherwise just === not bcrypt compare import { compare } from "bcrypt";
- isaacsultan 3y agoYes, exactly hashed and salted by bcrypt. If I wanted harden this setup, my next consideration would be either having a separate microservice that's purely responsible for auth, or using 3rd party provider like Cognito.