It works!

@redman what if secretly he does know how it works but the code is a shithole so saying here that he doesnt know is just making sure he wont be bothered by someone about it.

I personally do not like the “it works” because I have seen to many things that “works” for all the tested cases but breaks horribly with some real customers or opens a huge security hole, like putting the secret key in the js file ;)

Sure, it “works” as far as token generation is concerned, but as a security feature, not so much :/

@Codex404 quite possible. I spent 2.5 hours in the morning trying to understand it. Didn't get a thing. The code is the definition of shit

Praise the sun!