Passwordless-S3

S3 token store for Passwordless.

Installation

• npm install passwordless-s3

Usage

The S3 bucket must exist prior to using this token store. Further, since the S3Store has the ability to empty the bucket, the bucket should not hold any files besides the ones put there by the S3Store.

const S3Store = require('passwordless-s3');
passwordless.init(new S3Store({params: {Bucket: 'your-bucket-name'}}))

The constructor takes in s3Options, which is passed to the underlying S3 client. params.Bucket is the only required option. See the aws-sdk docs for a full description of the options object.

Testing and linting

• npm test
• npm run lint

Hash and salt

As the tokens are equivalent to passwords (even though only for a limited time) they have to be protected in the same way. By default passwordless-s3 uses bcrypt with automatically created random salts. To generate the salt 10 rounds are used.