I’m using DynamoDB to save my users and their passwords.
Now I currently make a request to get the user and his password from the database and I check on the clients side if the password was correct.
I’ve thought some more about it and you could probably see the password with a network-sniffer. But when I make a server-side validation, I would still have to upload the password to the server, so same effect.
I also thought about one-way hashes, which apparently aren’t safe either.
Isn’t there a better way to authenticate.
In my app, safety is an important aspect.
Can anyone help me?
I ended up using a SHA-256 Hash on the clients side and uploading the hashed password to the database.