password-storage – Tarik Billa

Sequelize: don’t return password

May 9, 2023 by Tarik

Another way is to add a default scope to the User model. Add this in the model’s options object defaultScope: { attributes: { exclude: [‘password’] }, } Or you can create a separate scope to use it only in certain queries. Add this in the model’s options object scopes: { withoutPassword: { attributes: { exclude: … Read more

How should I ethically approach user password storage for later plaintext retrieval?

August 29, 2022 by Tarik

How about taking another approach or angle at this problem? Ask why the password is required to be in plaintext: if it’s so that the user can retrieve the password, then strictly speaking you don’t really need to retrieve the password they set (they don’t remember what it is anyway), you need to be able … Read more