bolt
bolt copied to clipboard
Use crypto-password
crypto-password seems to be a good thing to capture community knowledge about the best way to handled passwords.
Let's standardise on it: https://github.com/weavejester/crypto-password/
Agree strongly!
You also can consider use buddy as low level security layer: http://niwibe.github.io/buddy/#_password_hashers
PD: I'm also working on security library for clojure but it obviously not the same target that cylon, because it works in more low level layer. But I have done some thing similar autentication/authorization abstractions. It may be interesting to collaborate?
Yes, indeed. Cylon is designed to help developers construct real-world applications building on the meta-architecture of component. Like modular, it is mostly a collection of wrappers to other libraries. For example, modular's cljs-build wraps Thomas Heller's shadowbuild library. I like the idea of integrating with buddy, beginning with your password hashers, this makes a lot of sense and I subscribe to your design philosophy. Thanks for letting me know about buddy, I actually prefer it to crypto-password as there are less overall dependencies and I've always liked bouncycastle. I'd very much like to collaborate on this with you.
Awesome! Let me know if you have any problem. And any colaboration is obviously welcome!