Phoenix Token for API-auth, salt per user or per app?

[bobbypriambodo]

I think the intention is to use it app-wide, and can be hard-coded. Referring to my old thread about Phoenix.Token, José said it’s closer to “namespace” instead of “salt” in semantic.

How is Phoenix.Token different from JWT?

Yes, we use the salt for key derivation and namespacing tokens. Calling it salt, although technically correct, is likely confusing. namespace could be a better name.