As of Laravel 5.5.13, you can censor variables by listing them under the key debug_blacklist in config/app.php. When an exception is thrown, whoops will mask these values with asterisks * for each character. For example, given this config/app.php return [ // … ‘debug_blacklist’ => [ ‘_ENV’ => [ ‘APP_KEY’, ‘DB_PASSWORD’, ‘REDIS_PASSWORD’, ‘MAIL_PASSWORD’, ‘PUSHER_APP_KEY’, ‘PUSHER_APP_SECRET’, ], … Read more
You need two separate keys, one that tells them who you are, and the other one that proves you are who you say you are. The “key” is your user ID, and the “secret” is your password. They just use the “key” and “secret” terms because that’s how they’ve implemented it.
I’ve been playing with tokens for my application as well. While I’m not an expert by any means, I can share some of my experiences and thoughts on the matter. The point of JWTs is essentially integrity. It provides a mechanism for your server verify that the token that was provided to it is genuine … Read more
Basically elaborating on what’s outlined here. Here’s how it works: let’s say we have a function that takes a number from zero through nine, adds three and, if the result is greater than ten, subtracts ten. So f(2) = 5, f(8) = 1, etc. Now, we can make another function, call it f’, that goes … Read more