Password security

[Keith Andersen]

What's a realistic password security in app script? 

100 iteration SHA-256 hash is slow, but doable - but weak. anything north of 100,000 iterations is too slow.

PBKDF2 - worse. 

Suggestions for a web app that is open to the public but has no open to public registration.

Login attemps are already limited to five with a timeout.

Suggestions?

Keith 

My website: https://sites.google.com/view/klaweb/
Passions: God, Family, Scriptures, Learning, Data Management, Google Sheets + App Script and much more!

[Keith Andersen]

How are others handling "passwords" in app script web projects?

[George Ghanem]

I don't handle any passwords within my scripts. I control access to them by hiding them behind Google Sites and use Google Sites to manage logins via their gmail access.

I am interested in seeing what solution you may find to have a better experience for my users because Google Sites restricts access only to gmail users which causes me to request everyone who uses the website to create a gmail account if they don't have it, which is not the best experience!

 

 George

--
You received this message because you are subscribed to the Google Groups "Google Apps Script Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-script-c...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-script-community/3072d3f4-c8a8-4560-a381-27727b59f0f5n%40googlegroups.com.

[Keith Andersen]

George,

Hmmm...never heard of Google Sites restricting access to gmail users. Mine: sites.google.com/view/klaweb is open to the public. Go ahead and test it. Put it in a private browser session.

I will let you know if I find something on the password thing.

Cheers - Keith

To view this discussion visit https://groups.google.com/d/msgid/google-apps-script-community/03cc7692-7af7-47ae-be56-e52e717afa69%40gmail.com.

--

My Site: https://www.sites.google.com/view/klaweb/

My Google Stuff: https://sites.google.com/view/klaweb/google-sheets-stuff

Passions: God, Family, Friends, Scripture, Data Management, Google Sheets + App Script, MS Access, Programing, sharing and much more.