# login

## Purpose

The **login** table stores authentication credentials for personnel accounts used to access the facility web application.

It stores static data that links personnel to secure password hash used for authentication during login.

## Columns

| Field         | Type        | Description
|---------------|-------------|---------------------------------------------------------------|
| id_per        | MEDIUMINT   | Personnel identifier (PK, FK)
| password_hash | VARCHAR(255)| Secure hash of the personnel password used for authentication
|---------------------------------------------------------------------------------------------|


## Relationships

- References **personnel.id_per** through **id_per** to link authentication credentials to a personnel.


## Rules

- Each personnel has maximum one corresponding login record.
- Passwords are never stored in plain text; only hashed values are allowed.
- The use of hashing algorithms such as MD5, PBKDF2 or any SHA variant is strictly forbidden.
- Mandatory hashing algorithm is Argon2id with PIM value at least 12.


## Example output

+--------+----------------------------------------------------------------------------------------------------+
| id_per | password_hash                                                                                      |
+--------+----------------------------------------------------------------------------------------------------+
|     1  | $argon2id$v=19$m=425984,t=6,p=1$amdxMDBPV0E3R1BBVk90Nw$B7vR5xY98W6Pl7Z4kW3X81LKmN92qP4XvTsR72kLm91 |
+--------+----------------------------------------------------------------------------------------------------+