
Product
Announcing Precomputed Reachability Analysis in Socket
Socket’s precomputed reachability slashes false positives by flagging up to 80% of vulnerabilities as irrelevant, with no setup and instant results.
passwordless-mysql-bcrypt-node
Advanced tools
MySQL TokenStore for Passwordless using a pure Node.js implementation of bcrypt
This module provides token storage for Passwordless, a node.js module for express that allows website authentication without password using verification through email or other means. Visit the project's website https://passwordless.net for more details.
Tokens are stored in a MongoDB database and are hashed and salted using bcrypt-nodejs.
bcrypt-nodejs has the disadvantage of being slower than the native implementation of bcrypt but is easier to install on Windows machines. If you're looking for an implementation using the native version of bcrypt please use passwordless-mongostore.
First, install the module:
$ npm install passwordless-mongostore-bcrypt-node --save
Afterwards, follow the guide for Passwordless. A typical implementation may look like this:
var passwordless = require('passwordless');
var MongoStore = require('passwordless-mongostore-bcrypt-node');
var mongoURI = 'mongodb://localhost/passwordless-simple-mail';
passwordless.init(new MongoStore(mongoURI));
passwordless.addDelivery(
function(tokenToSend, uidToSend, recipient, callback) {
// Send out a token
});
app.use(passwordless.sessionSupport());
app.use(passwordless.acceptToken());
new MongoStore(uri, [options]);
Example:
var mongoURI = 'mongodb://localhost/passwordless-simple-mail';
passwordless.init(new MongoStore(mongoURI, {
server: {
auto_reconnect: true
},
mongostore: {
collection: 'token'
}
}));
As the tokens are equivalent to passwords (even though they do have the security advantage of only being valid for a limited time) they have to be protected in the same way. passwordless-mongostore uses bcrypt-nodejs with automatically created random salts. To generate the salt 10 rounds are used.
$ npm test
Florian Heinemann @thesumofall
0.1.3 (2015-07-13)
Features:
FAQs
MySQL TokenStore for Passwordless using a pure Node.js implementation of bcrypt
The npm package passwordless-mysql-bcrypt-node receives a total of 1 weekly downloads. As such, passwordless-mysql-bcrypt-node popularity was classified as not popular.
We found that passwordless-mysql-bcrypt-node demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s precomputed reachability slashes false positives by flagging up to 80% of vulnerabilities as irrelevant, with no setup and instant results.
Product
Socket is launching experimental protection for Chrome extensions, scanning for malware and risky permissions to prevent silent supply chain attacks.
Product
Add secure dependency scanning to Claude Desktop with Socket MCP, a one-click extension that keeps your coding conversations safe from malicious packages.