NodeJS encrypted connection string to Postgres

Question

I am learning NodeJS by building a JWT server. Basically I want to authorize users against credentials in a PostgreSQL database. I am considering node-postgres, passport, pg to connect with PostgreSQL but I have not found anyway to store my connection values encrypted. Ideally I would store them in a properties file so I can change them per environment.

Most examples I see do something like:

var pg = require('pg');
var conString = "postgres://YourUserName:YourPassword@localhost:5432/YourDatabase";

Can someone help show me how to encrypt and use my credentials so I don't have to hard code the plain values in my source?

Appreciate this is an old answer; mostly writing this for posterity. Putting credentials in source code like this is usually a bad idea, often a very bad one. Pulling them in from the deployment environment gives you more granular access control and operational flexibility. — Richard Marr
– Richard Marr, Commented May 16, 2017 at 13:45

Community · Accepted Answer · 2017-05-23 12:10:27Z

2

There seem to exist npm packages for this already. See https://www.npmjs.com/package/secure-conf. Seems to fulfill your needs.

Please note, that you should also secure your Connection to the DB using SSL. See SSL for PostgreSQL connection nodejs for a Solution.

edited May 23, 2017 at 12:10

CommunityBot

11 silver badge

answered Jan 14, 2017 at 22:27

triplem

1,3341 gold badge13 silver badges29 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

sonoerin Over a year ago

Thank you for the quick and awesome answer - will start on that now!

Sampene Ampofo · Accepted Answer · 2017-09-16 20:14:21Z

0

This should help.

if you use sequelize to connect postgres

const sequelize = new Sequelize("DB", usrname, password, { host: "/var/run/postgresql", dialect: "postgres", });

NB: get the host string from your pgsl db might be different //

answered Sep 16, 2017 at 20:14

Sampene Ampofo

1

Collectives™ on Stack Overflow

NodeJS encrypted connection string to Postgres

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related