21:03
2026-07-23
dev.to
developer-tools
Two credentials, two threat models: auth for a content API
A developer building a headless content API called Depot explains the need for two distinct authentication strategies: slow bcrypt hashing for low-entropy human passwords and fast SHA-256 hashing for …