How do you hash a string to SHA512 in Swift?

Why do OAuth 2.0 providers return access tokens in the hash and not the query string?

• I'm writting an OAuth 2.0 authentication system for a client using PHP (and avoiding JavaScript when possible). The OAuth providers that I'm using (Facebook, Google, and Microsoft) insist on providing the access token in the the url hash (i.e. "http://www.something.com/signon.php#access_token=INSERT_TOKEN_HERE"). From what I've read on the internet, PHP cannot access the hash part of the URL (everything after the '#"). I can access this with JavaScript and send it to PHP, but this is what I feel is an unnecessary step. So, in addition to the initial question above, i'm looking for a few other things: 1) Am I missing out on some, possibly security related, reason as to why this isn't simply passed in the query string. 2) Is there a way for PHP to access the hash string, thereby eliminating my need to use JavaScript? 3) *BONUS* Can I access the hash with other server-side languages such as ASP, Python, or Ruby? Thanks.

• Answer:

  The token is returned in the hash in OAuth 2.0 Implicit Grant. There is no way that server-side languages will have access to the hash because it is not passed on the HTTP GET request. For PHP and other server-side languages, you should request for OAuth 2.0 Authorization Code, which will pass through an authorization code phase. See: