The server generates and returns an arbitrary token, which is typically a hash or some other fingerprint from the contents from the file. The browser does not need to know how the fingerprint is generated; it only must send it to the server on another ask for. If your fingerprint https://romainh420nbm3.wikipowell.com/user