Tags: skadi-cloud/gist
Tags
server: store tokens hashed with argon2 Auth tokens aren't stored as plaintext on the server but are hashed with argon2. The salt is the creation time of the token. Temporary tokens aren't hashed because they are short-lived (10 min max from creation till redemption). https://github.com/P-H-C/phc-winner-argon2/blob/master/argon2-specs.pdf
PreviousNext