What are best practices for activation/registration/password-reset links in emails with nonce

This question is very similar to Implementing secure, unique “single-use” activation URLs in ASP.NET (C#). My answer there is close to your scheme, with a few issues pointed out – such as short period of validity, handling double signups, etc. Your use of a cryptographic nonce is also important, that many tend to skip over …

Read more

Are idempotent functions the same as pure functions?

An idempotent function can cause idempotent side-effects. A pure function cannot. For example, a function which sets the text of a textbox is idempotent (because multiple calls will display the same text), but not pure. Similarly, deleting a record by GUID (not by count) is idempotent, because the row stays deleted after subsequent calls. (additional …

Read more