-
it is in fact possible via keycloak's access token JWT see what roles the user has, sometimes either adding built in mappers or specifiying the roles scope is necessary.
because of this I would li…
-
Hi,
I am trying to use the FOSFacebookbundle as an authentication source for my iOS application. It works until I set the firewall to stateless. I would like the ability to use the access token as th…
-
**Description:**
The JWT tokens in `pages/api/admin-check-login-code.ts` are currently set with an expiration date far in the future (`2038`). This could lead to significant security risks if tokens …
-
In symfony 6 refresh token not working properly because it unable to find the controller. Do you have any solution for this case ?
security.yaml -> firewalls:
```
# ...
firewalls:
api_…
-
During responding to the token request, satosa tries to get the configured extra troken claims from the `provider.userinfo`, see https://github.com/IdentityPython/SATOSA/blob/master/src/satosa/fronte…
-
Just like Pony, we want to limit access to things like I/O based on authority tokens (in Pony, often referred to as [object capabilities](https://tutorial.ponylang.io/object-capabilities/object-capabi…
-
Hi there,
I'm implementing astateless CSRF protection. This is a pattern listed by [Owasp](https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Token_Based_Mitig…
-
Using JWTs as sessions is not recommended by several large security companies and not spring boot themselves and that there is a reason as to why spring security does not have a JWTFilter built in by …
-
# Description
We need to develop a ManagerSimulator class to simulate the reception of events from multiple Wazuh agents. This simulation will be used exclusively for collecting metrics on agent pe…
-
Started to re-investigate issue #1790, then checked the section "V3.5 Token-based Session Management" and reached to the conclusion, that the entire section should be just cleaned up.
At the moment…