Recipes

Whole tasks rather than single functions: what to call, in what order, and what to store between calls.

Each page here is one job, written the way you would actually ship it.

Read the raw body, check the signature, and keep the failure path shaped like the success path.

Password, then a one-time password, with replay refused and the timing flat.

Argon2 with a pepper, lazy rehashing, and the absent-account branch.

Generate, store only the digest, look up by digest, compare in constant time.

One secret, many labelled keys, imported once.

One call that parses and strips prototype-pollution keys.

A browser page that downloads one module and nothing else.