将身份验证数据存储在 neo4j 个节点中是一个好习惯吗？

Question

This may seem to be an ingenuous question but I searched for examples without finding anything about it. So, is it a good practice to store authentication data such as usernames and passwords in a neo4j database? I use to embed but I ask for the general case. Ps. I don't want this to become an opinion-based discussion, I was just wondering whether there are some technical aspects that make this operation not safe or anyway not so good.

Answer 1

You should be fine, as long as you hash and salt your passwords correctly.

And make sure to communicate over an https connection with authentication with the db or in a trusted network.

Answer 2

You can store authentication data in Neo4j nodes with no issues at all, as long as you properly encrypt the passwords and follow other guidelines. A structure of Nodes and Relationships is a great way to handle complex authentication and authorisation data. This should help -> Neo4j Access Management