Add a separate login secret #20
Labels
No labels
bug
c:haku
c:rkgk backend
c:rkgk frontend
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: liquidex/rkgk#20
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This would be in addition to user IDs - currently the user ID is the secret, but this effectively disallows any publishing of the user ID, which could be useful for e.g. exporting walls with full metadata. A wall would contain rows informing who created the wall and who modified it, but this can't be done with mere session IDs.
NOTE: Implementation not audited, probably full of security holes, but it's better than nothing. Now user IDs can be publicised, which was the whole point of this in the first place.