search

railslove / instant_login

MIT License
1 stars 1 forks source link

use HMAC to be more independent from the underlying persistence layer #15

Open kangguru opened 9 years ago

kangguru commented 9 years ago

instead having the user to add an db field we could use HMAC to sign the URL

see http://lucumr.pocoo.org/2013/11/17/my-favorite-database/ as inspiration and what was done in the fintechtoolbox

bumi commented 9 years ago

I totally like the idea. In general I think this could be something we could consider more often. similar to what we did at the skrill WPF.