Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 209331
19 votes

Is Password Hashing Bad?

The specific claim: "Password hashing is bad" is somewhat odd. If you are supporting passwords, hashing is pretty important. The more interesting and more contentious (based on the other comments an …
JimmyJames's user avatar
  • 28.9k
1 vote

Handling OAuth 2.0 access token

Authentication and authorization are typically checked while handling a request. Unless you have specific requirements specifying that you must do something more, keep it simple. Trying to do this k …
JimmyJames's user avatar
  • 28.9k
1 vote

How to combine session-based authentication and stateless REST API

This article walks through various ways to use OAuth2. It might help you work through this. …
Community's user avatar
  • 1
1 vote

Circular dependency in microservices architecture for Authentication

There are "many different and valid ways" to do OAuth2 but I would recommend using cryptographic signatures on the tokens. …
Community's user avatar
  • 1