bnoguchi/mongoose-auth

Don't store the salt in the database

Opened this issue · 0 comments

The salt is already incorporated inside the hash field, so there is no need to store this in the collection as an extra field:

When authenticating it is not using it.

See: http://stackoverflow.com/questions/277044/do-i-need-to-store-the-salt-with-bcrypt