cakephp / authentication

Authentication plugin for CakePHP. Can also be used in PSR7 based applications.
MIT License
117 stars 100 forks source link

Token Identifier: Add Option to Hash Token Before Resolving #559

Closed amayer5125 closed 2 years ago

amayer5125 commented 2 years ago

With this change developers can hash values stored in the database and specify a hashAlgorithm to apply before forwarding the value to the resolver.

I retained the default behavior of no hash, but we should probably apply some hash by default for security reasons. Then users can disable the hash, but it is secure by default.

markstory commented 2 years ago

Thank you 🎉