Are there any security risks in transmitting a hashed password through req.user with passportJS?

While working with an express backend secured by passportJS, I have observed that the default behavior is to send user information in req.user (which includes the password) for each request made post logging in. Is this additional data sent through cookies? And is it safe to include the hashed password in these requests?

Answer №1

The information stored within the user object does not come directly from the request itself.

Instead, it is internally managed and linked to a specific token (such as a JWT or session ID) that accompanies the request.

Similar questions

If you have not found the answer to your question or you are interested in this topic, then look at other similar questions below or use the search

How to properly implement ng-if for a select option in Angular.js?

Within the controller, I defined a scope variable: $scope.readOnly = true. In the HTML code: <select ng-if="readOnly" ng-model="readOnly" required> <option value="true" selected>True</option> <option value="false">False ...

The issue with jqXHR.responseText property missing in IE versions lower than 10 is causing problems with jQuery File Upload response handling

Encountering issues with ie8/ie9 when attempting to receive response HTML from the server. $(function() { $('#fileupload').fileupload({ url: '@Url.Action("Save", "CounterDoc")', dataType: 'json', f ...

Biscuit battles against MySQL Database Storage

In terms of user interaction, I am primarily concerned with performance. As part of a project I am working on, users have the ability to RSVP to events. While storing their attendance choice in a database is necessary, I also want the button that allows th ...

Jquery ripple effect does not function properly with background-attachment: fixed style

Is there a way to make the effect ripples () work with background-attachment: fixed? I'm trying to achieve this effect while keeping the background fixed in place. Any suggestions on how to make this work? background-attachment: fixed; ...

The casperjs evaluate function isn't able to provide me with the necessary data I

Having trouble getting my function to return data correctly. I am trying to retrieve the value of this input box. <input type="text" value="<a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="0b6e736a667b6764646025686466">[em ...

Bootstrap does not show submenus on its navigation menus

I am currently designing a menu with Bootstrap, but for some reason, the submenu items are not showing up. https://i.stack.imgur.com/qZqyf.png After carefully reviewing the HTML code multiple times, I am unable to identify any issues. I am now questionin ...

Combining two elements in a React application

Having a collection of assets and their quantities: const bag = { eth: 50, btc: 30, kla: 10, set: 5, ova: 5 }; const assetList = { eth: { name: "Ethereum", icon: "urlhere", colour: "#030", text: "light&q ...

Enhancing Communication Between JavaScript and PHP

Positioned within my form is an input field where users can enter their postcode. The shipping cost for their order will be determined based on this postcode, utilizing PHP to assign different costs depending on the zone. After the user enters their postc ...

incorporating a timer into a JavaScript game

I am currently working on a memory card game where I want to include a stopwatch feature. I'm looking to display the time elapsed from when the user selects the first card until they win. However, I am struggling with keeping the stopwatch running smo ...

Report of transactions containing product name and customer email address

Looking for a method to create a PayPal report that includes both the Item name (or ID) and buyer's email address. This solution can involve using Google script or directly through the PayPal report engine. Appreciate any assistance! ...

manipulating an iframe on a separate domain

Currently, I am in the process of creating a mobile app using the Ionic framework for my website. Nevertheless, I believe that the issue at hand is not exclusive to Ionic. My goal within the app is to showcase a full-width, full-height iframe loading a sp ...

Stop treating extra attributes of an Array as elements (in Chrome)

I recently implemented a snippet that enhances Array's functionality by adding a getUnique function: Array.prototype.getUnique = function() { var u = {}, a = []; for (var i = 0, l = this.length; i < l; ++i) { if (u.hasOwnProperty(this[ ...

Is it possible to apply draggable functionality in the same way you attach events to an arbitrary node and a selector?

Here is a possible solution: function myFunction(){/*.....*/} $("body").on("click", "li.itemlist", function(){ alert("ping"); }); This code sets up a click event for all li.itemlist elements under the body element. However, is there a way to sim ...

Navigating an HTML table with the precision of a battleship commander: A guide

I have a simple HTML table that I want to parse line by line using JavaScript without any specific identifiers like class names. My goal is to create a mapping system similar to the following: AC000(red)(green) => cell match. As illustrated in the scr ...

mastering the chrome api within your redux-saga workflow

Currently, I'm working on creating a 'get_current_url' function using redux-saga in my project involving a Chrome extension built with React.js. In order to obtain the current URI, I need to utilize the chrome.tabs.query API. Below is the sn ...

Could you please ensure that the animation activates upon hovering over the "a" element?

Utilizing bootstrap, I have created the following code. I am looking to add functionality that triggers an animation upon mouseover of an img or a element, and stops the animation upon mouseleave. .progress-bar { animation: pr 2s infinite; } @keyfr ...

Utilizing Bootstrap Modal functionality in a Django web application to enhance user experience

I am currently facing a minor issue in my Django application. I am attempting to utilize a modal from Bootstrap 4 along with AJAX to create a new object. Below you can view the code I used. However, when the user clicks the button, instead of seeing the mo ...

Your request was denied by the Google Maps API server due to an invalid request. Please include the 'size' parameter in your request

I need to incorporate a static Google Map into my application built on node.js. Here is the code snippet: .panel.panel-primary .panel-heading h2.panel-title On the map .panel-body img.img-responsive.img-rounded(src="http://maps.googl ...

Seeking out information on our family's ancestry

I am currently developing a Family Tree feature for my web application using HTML5 specifications. Despite researching and coming across various JS samples, none seem to meet my specific requirements. I have explored options like JIT, Rafael, and GoJS, but ...

Leverage the power of Component Router in conjunction with the Upgrade

While attempting to integrate the Angular 2 Component Router with the upgrade adapter in Angular 2 RC 4, I encountered the following error: Bootstrap at least one component before injecting Router. at setupRouter Below is my main.ts file: angular.mo ...