Confirmed users
358
edits
Services/Sync/KeyRecovery: Difference between revisions
→Server-Generated Tokens
No edit summary |
|||
| Line 143: | Line 143: | ||
The recovery service checks the provided auth token to make sure the signature is good, and that it "new enough" according to its own local time. It can thus authenticate users quickly and simply without needing to consult any external services during the request. | The recovery service checks the provided auth token to make sure the signature is good, and that it "new enough" according to its own local time. It can thus authenticate users quickly and simply without needing to consult any external services during the request. | ||
Open Questions: | |||
* is there a standard for signed auth tokens like this? | |||
=== User-Generated Tokens === | === User-Generated Tokens === | ||