4 ms·
Is there any documentation for this? For example is "securityStamp" in User.sql designed to store the salt? Or is it something else entirely? There's security
by UnoriginalGuy 10y ago
Is there any documentation for this?
For example is "securityStamp" in User.sql designed to store the salt? Or is it something else entirely? There's security stamps in other frameworks which are just unique values (e.g. UIDs) which just change when a user's password changes so you can invalid old cookies without storing the hash within the cookie.
If there is no salt support at all then this is inappropriate in 2016 as boilerplate.