✅ Login system using avalonia
I'm using avalonia to make a simple login system. The way it works is that you put in your credentials, and then it sends over to the backend (servers), so it can check if they're correct.
But I have a question, when you make an account for example, which sends the password over to the server to store it (a hashed version of it), wouldn't a middle man be able to take it? Is there a way to prevent this by encrypting or something?
And also when sending over the password to the backend to check for credentials, wouldn't this propose basically the same problem?
If so, what are some ways to prevent this? Or is this an issue I'm somehow overthinking? I've searched a bit for login/authentication systems, but can't really find much (perhaps i'm googling the wrong thing).
But I have a question, when you make an account for example, which sends the password over to the server to store it (a hashed version of it), wouldn't a middle man be able to take it? Is there a way to prevent this by encrypting or something?
And also when sending over the password to the backend to check for credentials, wouldn't this propose basically the same problem?
If so, what are some ways to prevent this? Or is this an issue I'm somehow overthinking? I've searched a bit for login/authentication systems, but can't really find much (perhaps i'm googling the wrong thing).