The server generates and returns an arbitrary token, which is typically a hash or some other fingerprint of your contents in the file. The browser isn't going to need to know how the fingerprint is produced; it only must deliver it into the server on the following ask for. In https://alfredg319myl3.nico-wiki.com/user