NodeJS password hash cryptographic function no longer available

[gtorodelvalle]

Wappler Version : Version 3.0.0-beta.5 (3.0.0-beta.5)
Operating System : macOS Catalina 10.15.5

Expected behavior

The NodeJS password hash cryptographic function is available

Actual behavior

The NodeJS password hash cryptographic function is NOT available

How to reproduce

Please, see the attached screencast

Grabación de pantalla 2020-06-09 a las 13.06.41

[patrick]

The Password Hash formatter is for PHP only, it uses the PHP password_hash method for hashing. There is not such method in ASP and Node. We will introduce more Cryptographic formatters specific for Node.

[gtorodelvalle]

I guess this means that the “Use Password Hash verify” checkbox has no effect for the NodeJS case, right?

[s.alpaslan]

Right

[bradyneal]

@patrick Any idea when this feature is coming? It seems pretty important, no?

Also, is there any recommended workaround in the meantime (e.g. using SHA512)?

[JonL]

Maybe this is of interest to you.

Argon2 0.1

In the past before Custom Modules existed I implemented Argon2 for node via a custom formatter. The only problem with this approach was that formatters are synchronous and Argon2 for node would only run in asynchronous mode. I worked around this by wrapping the async function in a sync function. Wrong in so many ways and I knew that at the time but there wasn’t any other solution available. Anyway, I finally found some time to create an asynchronous custom module for Argon2. You know the dri…

[bradyneal]

Oh, nice! Any chance one can pull request into the core Wappler repo and that this pull request is pending?

[JonL]

This is a 3rd party extension. It can’t be added to the core as a PR. The file structure is different and the code wouldn’t work

[Teodor]

Argon2 is now available for NodeJS as well.

Using Argon2 Secure Hashes

Intro Using the Argon2 hashing algorithm requires a little different workflow for creating and validating the users using Security Provider. In this tutorial we will show you what’s different and how to create users in your database and validate them on login. You already know how to create a login system, so we won’t show the whole workflow again, as it’s the same. If you don’t know how how to do this, please check: Security and Login Hashing Users’ Passwords Before we insert the users logi…