Wt::Auth::Token Class Reference

An authentication token hash. More...

#include <Wt/Auth/Token>

Public Member Functions
	Token ()
	Default constructor. More...
	Token (const std::string &hash, const WDateTime &expirationTime, const std::string &purpose, const std::string &scope, const std::string &redirectUri)
	Constructor.
bool	empty () const
	Returns whether the token is empty. More...
const std::string &	hash () const
	Returns the hash.
const WDateTime &	expirationTime () const
	Returns the expiration time.

Detailed Description

An authentication token hash.

An authentication token is a surrogate for identification or authentication. When a random authentication token is generated, e.g. using WRandom::generateId() it is a good practice to hash it using a cryptographic hash function, and only save this hash in the session or database for later verification. This avoids that a compromised database would leak all the authentication tokens.

See also

User::addAuthToken()

User::setEmailToken()

Constructor & Destructor Documentation

Token()

Wt::Auth::Token::Token

(

)

Default constructor.

Creates an empty token.

Member Function Documentation

empty()

bool Wt::Auth::Token::empty

(

)

const

Returns whether the token is empty.

An empty token is default constructed.