xavi
/
slcl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 3 Wiki Activity

README.md: Fix broken link to usergen

This commit is contained in:
Xavier Del Campo Romero 2023-03-06 02:26:24 +01:00
parent 4cd577afa9
commit 3e95727e27
Signed by: xavi
GPG Key ID: 84FF3612A9BF43F2
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -42,7 +42,7 @@ to `slcl`. If required, encryption should be done before uploading e.g.: using
- cJSON >= 1.7.15.
- [`dynstr`](https://gitea.privatedns.org/xavi92/dynstr)
(provided as a `git` submodule).
- `xxd` (for [`usergen`](/usergen) only).
- `xxd` (for [`usergen`](usergen) only).
- CMake (optional).
### Ubuntu / Debian
@ -133,16 +133,16 @@ schema:
}
```
[`usergen`](/usergen) is an interactive script that consumes a username and
[`usergen`](usergen) is an interactive script that consumes a username and
password, and writes a JSON object that can be appended to the `users` JSON
array in `db.json`. A salt is randomly generated using `openssl` and passwords
are hashed multiple times beforehand - see [`usergen`](/usergen) and
are hashed multiple times beforehand - see [`usergen`](usergen) and
[`auth.c`](/auth.c) for further reference. Also, a random key is generated
that is later used to sign HTTP cookies.
When users authenticate from a web browser, `slcl` sends a SHA256HMAC-signed
[JSON Web Token](https://jwt.io), using the random key generated by
[`usergen`](/usergen). No session data is kept on the server.
[`usergen`](usergen). No session data is kept on the server.
### Running