Submit user name and password

(1)

You can use MD5 irreversible encryption to transmit passwords. Of course, it is impossible to directly add MD5 to the password, because the hash string produced in this way has no timeliness, as long as the password is not modified, it is valid. Therefore, we must add some time elements to this string to convert this password into a temporary password. Such a temporary password cannot be used even if it is intercepted due to timeliness.

(2)

A temporary token means that the client does not need to use the time as the credential. Instead, the client logs on to the server to obtain a credential and uses the credential as the temporary password. This method can solve the problem, but consumes an HTTP request.