Author Archives: DanDev

I need to generate a token in order to share an ‘invite’ link, what should the token be?

Posted on by

Just to elaborate a bit more:

User A owns a directory of files on my server
User A wants to share a link with a token that grants anyone with the link access to that directory
I have an API user A can hit (GenerateDirectoryToken)
User A s… Continue reading I need to generate a token in order to share an ‘invite’ link, what should the token be?→

Is it sensible to accept a password + any other random characters for successful authentication?

Posted on by

Supposing a user of my system has set their password to Password123
At the login screen, what would be the security implications of me accepting:
Password123 or
Password1234 or
Password123ABC
Based on the fact they all start with the passw… Continue reading Is it sensible to accept a password + any other random characters for successful authentication?→