IndieAuth – A federated login protocol using one's own domain name
I only use single serving server salt hashing for authorization and identification. It requires two requests but it&#x27;s secure for login and most importantly it&#x27;s simple enough to implement in javascript.<p><pre><code>                   client --- server

    salt?            -&gt;         -&gt;  generate salt
    hash(pass+salt)  &lt;-         &lt;-  salt
         -&quot;-         -&gt;         -&gt;  verify hash
    done             &lt;-         &lt;-  auth</code></pre>