Styria-Digital / django-rest-framework-jwt

JSON Web Token Authentication support for Django REST Framework
https://styria-digital.github.io/django-rest-framework-jwt/
MIT License
191 stars 57 forks source link

Response body contains the auth token when enabling auth cookie #100

Closed sadikuar closed 3 years ago

sadikuar commented 3 years ago

Hello,

I just tested this python module and found out that when you choose to send your token as a server cookie, the response body still contains the cookie (which is weird).

These screenshots are requests (using postman) to a demo project with the module installed for JWT authentication. As you can see, the auth token is both in the response body and response cookie :

Postman - Response body

image

Postman - Response headers

image

Edit : I created a PR #99 to resolve this issue