-
**What**
Get the refresh token flow working.
**Why**
Currently when a token expires a user has to login again to get a new one. For surf that is less of a problem since we have a long expiration…
-
Currently only user and password is allowed, are their any plan on allowing token based authentication?
-
Hello,
I've set up a secure connection with Darkloop (DarkLoop.Azure.Functions.Authorization.Isolated). I have an Angular frontend and users connect with their Microsoft account (accounts have roles)…
-
### ⚠️ Please verify that this question has NOT been raised before.
- [X] I checked and didn't find similar issue
### 🛡️ Security Policy
- [X] I agree to have read this project [Security Poli…
-
### Specification
In order to form a network securely, we need some way to verify cryptographically whether a node should be able to access a network. To do this we need to make use of tokens as a …
-
## Summary
API calls must be able to pull the authentication mechanism out of the request.
## Methods
We have a few methods so far.
### Authjs Cookies
Authjs.dev sets cookies and their …
-
-
Some applications may want to authorize user input using multiple bearer tokens, for example an identity and an MAA token.
While there is no standard way to do that, we could support a slightly ext…
-
Thanks for all the work on this great gem. Is there a simple way to protect the "/metrics" endpoint using a bearer token? Or is it the way to go to use a middleware for this? As far as I know, it is p…
-
Generate a new type of token for actions requiring higher security. This will require logging in again to confirm the identity of the requester.
Compare to GitHub's sudo mode.