Any have idea on how signup and login working?

safwanolaimat · April 4, 2018, 10:24am

anyone have idea on how signup and login working ?
i have api with elixir and website with meteor
i need to create signup endpoint in elixir to create user account
i don’t want to create http request to meteor server
in need to create user in elixir and insert it to MongoDB

this what i did and still can’t login from web
create sha256 then bcrypt with 10 rounds

jhuenges · April 4, 2018, 12:53pm

robfallows · April 4, 2018, 1:08pm

You could check Meteor’s implementation here:

github.com

meteor/meteor/blob/devel/packages/accounts-password/password_server.js

/// BCRYPT

var bcrypt = NpmModuleBcrypt;
var bcryptHash = Meteor.wrapAsync(bcrypt.hash);
var bcryptCompare = Meteor.wrapAsync(bcrypt.compare);

// User records have a 'services.password.bcrypt' field on them to hold
// their hashed passwords (unless they have a 'services.password.srp'
// field, in which case they will be upgraded to bcrypt the next time
// they log in).
//
// When the client sends a password to the server, it can either be a
// string (the plaintext password) or an object with keys 'digest' and
// 'algorithm' (must be "sha-256" for now). The Meteor client always sends
// password objects { digest: *, algorithm: "sha-256" }, but DDP clients
// that don't have access to SHA can just send plaintext passwords as
// strings.
//
// When the server receives a plaintext password as a string, it always
// hashes it with SHA256 before passing it into bcrypt. When the server

This file has been truncated. show original

safwanolaimat · April 5, 2018, 12:27pm

yes i know this file
what i understand from it
first do sha256
second do bcrypt with 10 rounds