****PROJECT PHASE 2 PART-D *****

AUTHENTICATION:

PROCESS OF VERIFYING WHO SOMEONE IS.

VERIFYING IDENTITY.

USED TO SIGN UP/LOGIN

AUTHORIZATION:

PROCESS OF VERIFYING WHAT SPECIFIC APPLICATIONS,FILES, AND DATA A USER HAS ACCESS TO.

STORING PASSWORDS:

PASSWORDS ARE NEVER STORED IN THE DATABASE DIRECTLY .

THEY ARE STORED IN THEIR HASHED FORM.

A HASH FUNCTION CONVERTS A STRING (READABLE) TO UNRECOGNIZABLE STRING(UNREADABLE) .

THE PASSWORD ENTERED BY THE USER IS SENT TO A HASH FUNCTION AND AN UNREADABLE STRING IS GENERATED .THIS STRING IS STORED IN THE DATABASE.

IT IS VERIFIED FOR AUTHENTICATION.

WHEN AN USER SETS A PASSWORD : abc123 THIS IS CONVERTED INTO AN UNRECOGNIZABLE STRING: str1  BY THE HASH FUNCTION, AND THAT STRING IS STORED IN THE DATABASE.

IF THE USER , WHILE LOGGING IN ENTERS ANOTHER PASSWORD: abc , THIS STRING IS SENT TO THE HASH FUNCTION , IT GENERATES A STRING: str2 (AS THE PASSWORD IS DIFFERENT) . AS str2 DOESNOT MATCH WITH str1(STORED IN DB) LOGIN FAILS.

Comments

Popular posts from this blog

DATABASE RELATIONSHIPS

ROUTING (GET /) home route

Query Strings