Easy, secure, opinionated authentication
Note: this is no longer supported at all. Seriously don't use it ## Features
Anyone! It's designed to be easy and stay secure no matter what.
This was, however, designed especially for those who do not host their database on the same server as their app. This can be very insecure (though most people don't know why. Read more about the security in the explanation) and eventually leads to the exploitation of sensitive user data! This module allows your app to be remote (not on the database server) while remaining as secure as possible.
My goal for this project was to create a simple API for authentication that wouldn't allow compromises in security.
Lock-Up maintains a very opinionated and secure way of managing users passwords so you don't have to. Of course, the way this module works is not without reason, so make sure to read the Build Explanation on why Lock-Up is built the way it is.
NOTE: If something seems odd, there's probably a reason for it! Please read the Explanation!
Using Lock-Up in your node app is crazy easy.
var lu = ;lu =;lu;
This is just a quick rundown. For the full API, go HERE
NOTE: All functions return a promise. When I say 'returns', I really mean that's what you'll get when you run
id: The users UUID
username: The users username
createdAt: A timestamp of when the user was created
There are three main ways you can use this module ### As a plugin This is the most secure way to use this plugin because there is no over the wire communication. You probably fit this use case if:
This way is a must have if you can't host your app and the database on the same server. You probably fit this use case if you:
What you'll need depends on the setup you're using:
Find a bug? Please tell me about it! It's easy, and you can submit the bug HERE
Have something to contribute? Great! Fork my project and send me a pull request. If your code is up to par, I'll accept it!
Here it is, just because... GNU GPL v3.0