Sunday 21 April 2019

Where should I store the admin password

Hello,I am working on backend system and need to implement an admin dashboard with login.In the future, I intend on adding support for multiple admin users with different roles. This will be stored on a 'Admins' db.For now, I just need to add a single admin user for the MVP.I have a .env file that contains the JWT secret, database passwords etc.Is it okay to store the database password there? Any reason to hash it?

Submitted April 21, 2019 at 08:08PM by JerryNotAgain

No comments:

Post a Comment