All requests that require account authorization (i.e. to be "logged in") require a POST/GET field user
and hash
.
user
is the username for the account. It is case-insensitive.hash
is the hashed form of the account's password. The account password can be calculated using the following algorithm:
CharSequence hash = bin2hex(whirlpool(password + uid) ^ sha512(uid + password))