That way an attack done on the database could not leak the password but only their encrypted form. Moreover, the database could be administrated by different people and therefore we don't want to expose tokens to them.
That way an attack done on the database could not leak the password but only their encrypted form.
Moreover, the database could be administrated by different people and therefore we don't want to expose tokens to them.