Javascript Web3 sendTransaction not working

Question

I wrote the following to interact with a Geth node. Got Error: authentication needed: password or unlock. Is there any way to bypass that? I don't want to use private key in my code either. Can I interact with the node directly to send transaction or sign message?

var Web3 = require('web3');
var web3 = new Web3(new Web3.providers.HttpProvider('http://127.0.0.1:8545'));


web3.eth.sendTransaction({
    from: "0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
    to: "0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", 
    value: web3.toWei(2, "ether"), 
    nonce: '0x1',
    gasPrice: '0x5b9aca00',
    gasLimit: '0x56f90',
}, function(err, transactionHash) {
    if (err) { 
        console.log(err); 
    } else {
        console.log(transactionHash);
    }
});

Answer 1

Better try to use ethereum transaction builed library for generating and signing transaction offline. And after just call sendSignedTransaction method:

var Tx = require('ethereumjs-tx');
var privateKey = new Buffer('e331b6d69882b4cb4ea581d88e0b604039a3de5967688d3dcffdd2270c0fd109', 'hex')

var rawTx = {
  nonce: '0x00',
  gasPrice: '0x09184e72a000',
  gasLimit: '0x2710',
  to: '0x0000000000000000000000000000000000000000',
  value: '0x00',
  data: ''
}

var tx = new Tx(rawTx);
tx.sign(privateKey);

var serializedTx = tx.serialize();

// console.log(serializedTx.toString('hex'));
// 0xf889808609184e72a00082271094000000000000000000000000000000000000000080a47f74657374320000000000000000000000000000000000000000000000000000006000571ca08a8bbf888cfa37bbf0bb965423625641fc956967b81d12e23709cead01446075a01ce999b56a8a88504be365442ea61239198e23d1fce7d00fcfc5cd3b44b7215f

web3.eth.sendSignedTransaction('0x' + serializedTx.toString('hex'))
.on('receipt', console.log);
.on('transactionHash', console.log
.on('error', console.log)

Answer 2

In web3 1.0 :

web3.eth.personal.unlockAccount(address, password, 60)
.then((response) => {
    console.log(response);
}).catch((error) => {
    console.log(error);
});

unlocks an account for 60 seconds with the provided password. There is no way to bypass that, for the reason of security. Never unlock your account longer than necessary, if you allow RPC connections from any IP. This would allow anyone to do transactions from your wallet.