تم إضافة 903 بايت
، قبل 8 سنوات
<div dir="ltr" style="direction: ltr;">
The system has no user accounts nor sessions, and the API is all public. All actions are confirmed via [[../رسائل البريد|email messages]]
[[../API|API actions]] that commit changes to the listings database are performed over two steps:
# a request is received containing the object information to be affected, where all information is public
# a confirmation action follows by providing using a cryptographic token received over email, which uniquely identifies the object.
The cryptographic token is constructed as follows:
<code>base62(sha512(<var>[[../data#Listings|id]]</var> . <var>verb</var> . <var>[[../configuration variables#cryptographic-token-salt|cryptographic-token-salt]]</var>))</code>
Where <var>verb</var> is the literal name of the action being performed; i.e. one of <kbd>instate_listing</kbd> or <kbd>remove_listing</kbd>
</div>