****PROJECT PHASE 2 PART-D *****
AUTHENTICATION:
PROCESS OF VERIFYING WHO SOMEONE IS.
VERIFYING IDENTITY.
USED TO SIGN UP/LOGIN
AUTHORIZATION:
PROCESS OF VERIFYING WHAT SPECIFIC APPLICATIONS,FILES, AND DATA A USER HAS ACCESS TO.
STORING PASSWORDS:
PASSWORDS ARE NEVER STORED IN THE DATABASE DIRECTLY .
THEY ARE STORED IN THEIR HASHED FORM.
A HASH FUNCTION CONVERTS A STRING (READABLE) TO UNRECOGNIZABLE STRING(UNREADABLE) .
THE PASSWORD ENTERED BY THE USER IS SENT TO A HASH FUNCTION AND AN UNREADABLE STRING IS GENERATED .THIS STRING IS STORED IN THE DATABASE.
IT IS VERIFIED FOR AUTHENTICATION.
WHEN AN USER SETS A PASSWORD : abc123 THIS IS CONVERTED INTO AN UNRECOGNIZABLE STRING: str1 BY THE HASH FUNCTION, AND THAT STRING IS STORED IN THE DATABASE.
IF THE USER , WHILE LOGGING IN ENTERS ANOTHER PASSWORD: abc , THIS STRING IS SENT TO THE HASH FUNCTION , IT GENERATES A STRING: str2 (AS THE PASSWORD IS DIFFERENT) . AS str2 DOESNOT MATCH WITH str1(STORED IN DB) LOGIN FAILS.
Comments
Post a Comment