Yes, if you use PBKDF2 for the hashing and you do it with every request. In my template I’m using bcrypt and I’m doing it with every request. That might not sc

Yes, if you use PBKDF2 for the hashing and you do it with every request. In my template I’m using bcrypt and I’m doing it with every request. That might not scale well. One commenter suggested storing a session token, probably one that expires, and not authenticating if that exists. But, I’m using this for MVP’s to see if they’ll gain any kind of traction. Once a tool gets the kind of traction where this will be a problem it will be time to rethink the auth method.