This module provides token storage for Passwordless, a node.js module for express that allows website authentication without password using verification through email or other means. Visit the project's website https://passwordless.net for more details.
Tokens are stored in a MongoDB database and are hashed and salted using bcrypt-nodejs.
bcrypt-nodejs has the disadvantage of being slower than the native implementation of bcrypt but is easier to install on Windows machines. If you're looking for an implementation using the native version of bcrypt please use passwordless-mongostore.
First, install the module:
$ npm install passwordless-mongostore-bcrypt-node --save
Afterwards, follow the guide for Passwordless. A typical implementation may look like this:
var passwordless = ;var MongoStore = ;var mongoURI = 'mongodb://localhost/passwordless-simple-mail';passwordless;passwordless;app;app;
- uri: (string) MongoDB URI as further described in the MongoDB docs
- [options]: (object) Optional. This can include MongoClient options as described in the docs and the ones described below combined in one object as shown in the example
var mongoURI = 'mongodb://localhost/passwordless-simple-mail';passwordless;
- [mongostore.collection]: (string) Optional. Name of the collection to be used. Default: 'passwordless-token'
Hash and salt
As the tokens are equivalent to passwords (even though they do have the security advantage of only being valid for a limited time) they have to be protected in the same way. passwordless-mongostore uses bcrypt-nodejs with automatically created random salts. To generate the salt 10 rounds are used.
$ npm test
Florian Heinemann @thesumofall