Open AndreasWintherMoen opened 1 year ago
Access tokens are decrypted in middleware, but endpoint must decrypt refresh token and verify the id token (which is a JWT). Depends on #52 to verify id token.
Updated title. This issue is two-fold: API route and client calling said API route. No reason to make a separate issue for the latter.
Access tokens are decrypted in middleware, but endpoint must decrypt refresh token and verify the id token (which is a JWT). Depends on #52 to verify id token.