3 ms·
I use hybrid basic and cookie auth in my application. Basic auth functions as a captcha and invite code, eliminating users not invited and almost all bots. Af
by forgotmypw17 6y ago
I use hybrid basic and cookie auth in my application.
Basic auth functions as a captcha and invite code, eliminating users not invited and almost all bots.
After that,s done, the user gets a cookie (and a private key in LocalStorage) and is not prompted next time.
The beauty of cookies and basic is that the cookie is sent before auth takes place.
- mauflows 6y agoWhat do you use the private key for?
- forgotmypw17 6y agoThe private key is used for signing actions like writing and voting which the user performs. This allows the application to be truly decentralized.