search

Cvmcosta / ltijs

Turn your application into a fully integratable LTI 1.3 tool provider.
https://cvmcosta.github.io/ltijs/
Apache License 2.0
303 stars 68 forks source link

Nonce security when the tokenMaxAge is set to false #175 #185

Open priyachawla11 opened 1 year ago

priyachawla11 commented 1 year ago

Save Nonce in Database while sending the login request and delete on receiving the launch request, so that replay attacks won't be entertained as nonce cannot be reused in replay attacks after deletion