Implementation of Password Security with bcrypt Hashing #105
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What:
This PR introduces the use of
bcrypt
for secure password hashing in the authentication system. It replaces plain-text password verification withbcrypt
checks, ensuring that passwords are stored and verified securely.Why:
Previously, passwords were stored in plain text, posing security risks.
This implementation strengthens authentication by:
bcrypt
.How:
bcrypt
inuserdatahandler.py
to hash passwords before storing them.create_user()
function to hash passwords before saving.get_password_by_username()
function to return the hashed password.Key Changes:
bcrypt
import to handle password hashing.create_user()
to hash the password before storing it.get_password_by_username()
to return the hashed password.bcrypt.checkpw()
Previously:
Now,the password of new users will be stored as:
Checklist: