Unverified50% confidenceSolutionExact time
Enabling Archon authentication requires configuring both a Postgres URL and a signing secret of at least 32 characters (BETTER_AUTH_SECRET).
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/16/2026
First Seen
Valid until: 1/14/2027
Sources
Related Entities
Related Claims
UnverifiedSanitized logs and transcripts used to display the parts before and after `@` in URL passwords, exposing everything when the password was written as `%40`; this has been corrected.54% similarUnverifiedWebhook signature verification typically uses the HMAC-SHA256 algorithm, with the signature covering the timestamp and request body content, and the receiver locally recomputes the signature with the shared secret and compares it.51% similarUnverified登录接口几乎清一色使用 POST 的根本原因是 URL 会被浏览器历史、服务器日志、网络设备记录，密码以 GET 参数出现会泄露明文凭据51% similarUnverifiedWebAuthn 在注册时会将服务域名（Origin）与密钥绑定，使得仿冒域名的钓鱼网站无法触发合法签名51% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1043100API
curl https://kongchang.com/api/v1/knowledge/claims/1043100MCP
get_claim(id=1043100)