Kristoffer Dalby 393dd3e2d9 db: store all credentials in one SHA-256-hashed table ...

API keys, pre-auth keys and OAuth clients/tokens share one table and verify
path. Secrets carry 256 bits of crypto/rand entropy, so a SHA-256 digest
needs no stretching; bcrypt/argon2id rows rehash on use until 0.32.

2026-09-26 00:33:12 +02:00

19 KiB

Raw History

View Raw