pwdauth v1.1.0

Password authentication and authorization

Simple implementation of a custom password-based auth for web applications.

Can be used with of without server-side sessions.

Uses sha256 hash by default, different hash function (bcrypt etc) may be plugged in.

See direct usage example: test, and a full "server + client" example: auth.

License information

This project is released under the Apache License 2.0.

API

1. Client side:

   • createPasswordHash = function(password: String, userId: String)

   • createRequest = function(path: String, userId: String, passwordHash: String, timestamp: String)

2. Server side:

   • authorize = function(loadUser: Function, token: String)

   • authenticate = function(loadUser: Function, createRequest: Function, createToken: Function, request: Object)

Changelog

2018-03-04

• initial public version