Skip to content

Conversation

@rhutchison
Copy link

No description provided.

lirantal and others added 30 commits October 14, 2014 12:14
It used to fail silently (client only displays error when a message is available).
removed extra comma
The user password salt should be encoded with Base64 before being saved
to the database.

The current code adds an unecessary step of converting the result of
crypto.randomBytes() (which already returns a SlowBuffer) to a Base64
string and back again to a Buffer, and misses the final step of
converting the Buffer's bytes back to a Base64 string.

Because of this, the salt stored in the database is garbled. This is
inconvenient when manipulating the data in a terminal or text editor.

When generating the password hash, the crypto.pbkdf2Sync() method
creates a new Buffer directly from the data supplied. Due to the
incorrect encoding of the salt, entropy is lost at this step,
weakening the security of stored passwords against brute force attacks.
Currently createTransport is unnecessarily called upon every time a password request is made.
…ub.com/lirantal/meanjs into lirantal-enhancements-express-cookie-parameters

Conflicts:
	config/env/all.js
…ress-cookie-parameters

Enhancements express cookie parameters
fix getToggleElement on dropdown by updating to angular-bootstrap 0.12.0 meanjs#250
Removed unneeded comas from gruntfile.
…tance

Abstract nodemailer createTransport
Show error message when sending password request mail fails
Remove unecessary comment in karma.conf.js
lirantal and others added 28 commits June 9, 2015 07:58
Remove targets on signin and signup anchors
- remove access.log (*.log is enough)
- Move local.js config under MEAN.JS
- Rename iOS/Apple => OS (this is a mix of windows/osx stuff anyways)
Remove duplicate assets definition
Update package.json to indent space-2.
Add return for done(err) in test
trainerbill pushed a commit that referenced this pull request Jul 9, 2015
@trainerbill trainerbill merged commit 301b703 into trainerbill:AdminModule Jul 9, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.