moonq/flees
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

reborked the token system

Browse Source
This commit is contained in:
Ville Rantanen
2018-03-01 15:05:29 +02:00
parent 9ed8c18fb3
commit 06d42ee956
4 changed files with 241 additions and 152 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@@ -71,8 +71,7 @@ Operation is one of download, direct_download, zip_download, or upload
- shares.json stores hashed version of password.
- Additionally, it may store plain text password, if users so wish.
- Internally, Flees only compares the hashes of passwords
- Tokens are encrypted versions of the hash. (login/upload/download with
direct links). i.e. decrypted URL request equals password hash
- Encryption key is the app_secret_key
- Tokens are secret strings that allow login/upload/download with
direct links. You can have many tokens for single share.
- Direct download token is (password hash + filename) hashed