-
Forgive me if I use the wrong terms here, this is something that came up here on Monday in office with @ogoffart and @michaelstingl and @jnweiger and @ckamm
This is to avoid a situation where the …
guruz updated
4 years ago
-
-
Is it possible to expose access to the UserManager for lower level access (even if it's marked as not-recommended/at your own risk, etc.)? For example, to workaround a limitation in oidc-client where …
-
Access token entered is faulty. Check for and correct errors!
-
Noticed that `localStorage` is being used to store access and refresh tokens, and Local Storage can be vulnerable to XSS attacks. An alternative could be using http-only cookies.
See:
* https://co…
-
Hi @jonathan-dejong while updating to the latest version I figured out, that the `jwt_data` object growths really huge in size over time. I found some accounts having arrays of several thousand entrie…
-
Essentially, I think there's a missing else block around the
` credentials.refresh_token = tokens.refresh_token;
resolve(credentials);`
At auth.js:90.
This masks any issues with communicating w…
-
general resources:
https://scotch.io/tutorials/the-anatomy-of-a-json-web-token
https://www.vaporforums.io/viewTutorialList?category=JSONWebToken
automatic prolongation:
https://auth0.com/docs/t…
-
Hi,
I'm not sure if this the right place to ask for help but I have to try:
I already received and stored access and refresh tokens through the OAuth2 authorization code grant flow. Now I'm usin…
-
### Description
### Overview
Upon user login to the Reduced.to platform, an access_token is generated and stored as an HttpOnly cookie. However, the access_token lacks signature verification, enabli…