[web2py] Re: use database that build using web2py in another app

thanks anthony, as expected, from web2py, the crypt algorithm is secure (not just simple step to store the sensitive one), i'll try your second advice (using web2py as cas provider) first, because it simple than the first advice. thanks and best regards, stifan On Saturday, May 19, 2018 at 3:3

[web2py] Re: use database that build using web2py in another app

Note, you might also consider using web2py as a CAS provider from your other apps, letting web2py handle all the authentication logic. On Friday, May 18, 2018 at 3:05:33 PM UTC-4, Anthony wrote: > > He

[web2py] Re: use database that build using web2py in another app

Here is the code the compares a plain text password to the stored hashed password: https://github.com/web2py/web2py/blob/4ed36cfb1fe960d5c818c53562d920d407e991ae/gluon/validators.py#L2919-L2922 The salt and the digest algorithm name and parameters are stored in a string combined with the hash.