Wappler Version : Version 3.0.0-beta.5 (3.0.0-beta.5)
Operating System : macOS Catalina 10.15.5
Expected behavior
The NodeJS password hash cryptographic function is available
Actual behavior
The NodeJS password hash cryptographic function is NOT available
How to reproduce
Please, see the attached screencast
The Password Hash formatter is for PHP only, it uses the PHP password_hash method for hashing. There is not such method in ASP and Node. We will introduce more Cryptographic formatters specific for Node.
I guess this means that the “Use Password Hash verify” checkbox has no effect for the NodeJS case, right?
@patrick Any idea when this feature is coming? It seems pretty important, no?
Also, is there any recommended workaround in the meantime (e.g. using SHA512)?
JonL
July 16, 2021, 9:17pm
6
Maybe this is of interest to you.
In the past before Custom Modules existed I implemented Argon2 for node via a custom formatter.
The only problem with this approach was that formatters are synchronous and Argon2 for node would only run in asynchronous mode.
I worked around this by wrapping the async function in a sync function. Wrong in so many ways and I knew that at the time but there wasn’t any other solution available.
Anyway, I finally found some time to create an asynchronous custom module for Argon2.
You know the dri…
Oh, nice! Any chance one can pull request into the core Wappler repo and that this pull request is pending?
JonL
July 17, 2021, 6:10pm
8
This is a 3rd party extension. It can’t be added to the core as a PR. The file structure is different and the code wouldn’t work
Teodor
December 9, 2021, 4:20pm
9
Argon2 is now available for NodeJS as well.
Intro
Using the Argon2 hashing algorithm requires a little different workflow for creating and validating the users using Security Provider. In this tutorial we will show you what’s different and how to create users in your database and validate them on login.
You already know how to create a login system, so we won’t show the whole workflow again, as it’s the same. If you don’t know how how to do this, please check: Security and Login
Hashing Users’ Passwords
Before we insert the users logi…