How are the keys generated? Randomly or based on the combo of name and password? (or name+extension and password?)
Ah, it handle by nsecbunker, you can learn more about it here: https://github.com/kind-0/nsecbunkerd/blob/master/OAUTH-LIKE-FLOW.md and https://github.com/kind-0/nsecbunkerd/blob/master/SECURITY-MODEL.md