How I Built an API Token Management Module for Django
How to design and build a secure API token management system in Django, from high-entropy token generation to hashed storage, CRC verification, and the full CRUD lifecycle.
All blog posts.
How to design and build a secure API token management system in Django, from high-entropy token generation to hashed storage, CRC verification, and the full CRUD lifecycle.
A deep dive into Django's password hashing system, from PBKDF2 to Argon2, and why your passwords are safer than you think.
What went wrong after manually adjusting migration ordering across apps and later merging upstream changes.
CSRF is all about abused trust. You trust your browser. Your browser trusts your cookies. but attackers know how to trick your browser into misbehaving on your behalf.
The initial post