What Okta Bcrypt incident can teach us about designing better APIs

1. n0rdy-blog-code-samples

   1 7 8 5.2 Go

   Code samples for https://n0rdy.foo posts

   

   All the code samples can be found here

2. InfluxDB

   influxdata.com featured

   InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.

   

3. bcrypt

   2 4 532 0.0 Java

   A Java standalone implementation of the bcrypt password hash function. Based on the Blowfish cipher it is the default password hash algorithm for OpenBSD and other systems including some Linux distributions. Includes a CLI Tool. (by patrickfav)

   

   I decided to check other Google results, and the next Java library in the list was bcrypt from Patrick Favre (link to GitHub repo) with 513 starts and the last release version 0.10.2 (so, not stable) from 12th of February 2023 (almost 2 years old). This suggested that I'd not use it in production, but why not to run our tests.

4. Bcrypt

   3 4 1,335 9.3 Python

   Modern(-ish) password hashing for your software and your servers

   

   Using bcrypt library with 1.3k starts and the latest release in November.

5. rust-bcrypt

   4 1 348 4.9 Rust

   Easily hash and verify passwords using Bcrypt

   

   As a library, I used rust-bcrypt based on my AI friend advice.

6. src

   5 761 3,413 10.0 C

   Read-only git conversion of OpenBSD's official CVS src repository. Pull requests not accepted - send diffs to the tech@ mailing list.

   

   Interesting! Let's check the OpenBSD implementation of this algorithm, and here is the link to it. The first point of interest lies here:

7. Spring Security

   6 15 9,087 10.0 Java

   Spring Security

   

8. bcrypt.js

   7 2 3,668 7.3 JavaScript

   Optimized bcrypt in JavaScript with zero dependencies, with TypeScript support.

   

9. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

Suggest a related project