Auth.js credentials provider

[tardy python]

I'm using the credentials provider with my php backend api, I searched on whether I should salt & hash the password before sending the post api call to my backend in order to prevent sending passwords in plain text, some said that it's fine to send them over https, others said that even so, I must hash the password both client side and in the backend, I still don't exactly know what I should go with. Any insights?

[rotund surge]

Post created!

🔎 This post has been indexed in our web forum and will be seen by search engines so other users can find it outside Discord

🕵️ Your user profile is private by default and won't be visible to users outside Discord, if you want to be visible in the web forum you can add the "Public Profile" role in id:customize

✅ You can mark a message as the answer for your post with Right click -> Apps -> Mark Solution
(if you don't see the option, try refreshing Discord with Ctrl + R)

[fair ore]

when signing up a user or logging him in it is okay to send unencrypted and unhashed passwords if you are sending them over https or other protocols where traffic is encrpyted by default

[tardy python]

alright thank you