🛡️ Security

HMAC (Hash-Based Message Authentication Code)

A construction that combines a secret key with a message and a hash function to produce a code that verifies both the integrity and authenticity of the message. It underpins signed URLs, API request signing, and session token validation.

📚 Deep Dive

Learn Article

How Signed-URL Authentication Works and Why a Missing Key Breaks It

Signed URLs let a server grant temporary, tamper-proof access without a login session. Here is how the signature is built, verified, and how a missing key turns verification into a rubber stamp.

intermediate 4 min read

Back to Glossary