How to encrypt password using pbkdf2_sha256 algorithm in angular 6

Question

I am using angular 6 and keycloak, I don't want to send password in clear text over the network.

Keycloak supports only pbkdf2_sha256 hashing algoritm, so I need a suggestion on how I can encrypt a password using same hashing algorithm before sending it to keycloak over the network

If you're using HTTPS and you're not passing the password in the URL, it's no longer being sent over in plain text. Hashing passwords on the client-side is usually not a good practice. — Dimitri Mestdagh
– Dimitri Mestdagh, Commented Dec 14, 2018 at 8:27

Akshay Rajput · Accepted Answer · 2018-12-14 08:46:20Z

1

You can use any NPM package for hashing password at the client-side, (sha1, sha256), As long as you are not storing the password on the client side as plain text avoid doing this:

npm install sha1
import * as sha1 from 'sha1/sha1';
const encryptedPassword = sha1(userCreds.password);

Instead, you can useJsonWebToken and HTTPS, Hope this helps

answered Dec 14, 2018 at 8:46

Akshay Rajput

2,0781 gold badge15 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to encrypt password using pbkdf2_sha256 algorithm in angular 6

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related