Skip to content

Fix teacher passwords stored in plain text#99

Open
YLaxmikanth wants to merge 1 commit into
rishima17:mainfrom
YLaxmikanth:fix/password-hashing-27
Open

Fix teacher passwords stored in plain text#99
YLaxmikanth wants to merge 1 commit into
rishima17:mainfrom
YLaxmikanth:fix/password-hashing-27

Conversation

@YLaxmikanth

Copy link
Copy Markdown
Contributor

Related Issue

Closes #27

Summary

Implemented secure password hashing for teacher authentication using bcryptjs.

Changes Made

  • Added bcryptjs dependency for password hashing.
  • Hash teacher passwords during registration.
  • Validate passwords using bcrypt comparison during login.
  • Added automatic migration for existing plaintext passwords.
  • Updated authentication flow to support asynchronous password operations.

Security Improvements

  • Passwords are no longer stored in plain text in localStorage.
  • Existing users are migrated automatically after successful login.
  • Backward compatibility is preserved.
  • Credentials are protected using bcrypt hashing with salt rounds.

Testing

  • Verified new registrations store bcrypt hashes instead of plaintext passwords.
  • Verified login works correctly with hashed passwords.
  • Verified legacy plaintext accounts are automatically migrated to hashed passwords after successful authentication.
  • Verified production build passes (npm run build).
  • Verified lint passes (npm run lint).

@vercel

vercel Bot commented Jun 23, 2026

Copy link
Copy Markdown

@YLaxmikanth is attempting to deploy a commit to the Rishima's projects Team on Vercel.

A member of the Team first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] : Teacher Passwords Stored in Plain Text

1 participant