Encrypt password in postgres jsonb

Question

At my company we're designing a new flow for our user to register. User and Company are very closely tied to each other. Due to several reasons we can't create the user and the company one after the other but we need to create them at the same time.

However as our form is on several steps, we collect all the user input in a separate Registration model in a jsonb attribute and then create the user and company at the end of the process from this intermediate model.

One of the problem is that we collect the user password. However as we're storing the registration in our database, the password is exposed.

How would you try to protect this?

EDIT: We're using Bcrypt to encrypt password

are you using bcrypt to encrypt password?

Sajin
– Sajin

2017-07-13 10:22:16 +00:00
Commented Jul 13, 2017 at 10:22 — Sajin
– Sajin, Commented Jul 13, 2017 at 10:22
Hi @Sajin, yes we are.

durian89
– durian89

2017-07-13 10:35:34 +00:00
Commented Jul 13, 2017 at 10:35 — durian89
– durian89, Commented Jul 13, 2017 at 10:35

Sajin · Accepted Answer · 2017-07-13 11:20:31Z

1

I have not tried this but I guess this will work. You can use the following code to encrypt the password before storing it as intermediate json.

my_password = BCrypt::Password.create("my password")

If you have designed the User model properly, there will be a password_digest field in your table. So while saving encrypted password, use:

@user.password_digest = my_password

instead of

@user.password = my_password

where you expect encryption to take place in the background.

answered Jul 13, 2017 at 11:20

Sajin

1,6381 gold badge16 silver badges18 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Encrypt password in postgres jsonb

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related