use cookie value to get session from DB, if no cookie or no DB record => error.

create new session for user.

drop session from DB and from cooklie.

redirect to login or user page, according to session value in context (set by middleware).

render list of loaded files.

проблема - генерируем превью сразу же.

token service factory.

storage factory.

save secret in object.

token service factory.

compile one time, on app start.

Argon2 is the winner of the password hashing competition and should be considered as your first choice for new applications;.

bcrypt where PBKDF2 or scrypt support is not available.

md5 - плохой вариант, подвержен брутфорс-атаке.

PBKDF2 when FIPS certification or enterprise support on many platforms is required;.

scrypt where resisting any/all hardware accelerated attacks is necessary but support isn’t.

file name generator util.

проблема - каждый раз вычитываем файл и парсим jpeg.

не очень эффективно - каждый раз вычитываем файл.

save to storage, return name aka md5sum; problem: only jpg, w/o checking.

get session or error from context.

put file to storage, create preview, append to list.

token service, way to pass a secret.

some key, salt.

token data.

token service.

web-server data, with ref.

service data.

only user id, no session id.

user version used for session check.

use DB for user profile.

attempt to abstract storage.

token structure.

storage interface for using in tests.