TeskaLabs / seacat-auth

SeaCat Auth provides authentication, authorization, identity management, session management and other access control features.

GNU General Public License v3.0

11 stars 6 forks source link

Closed byewokko closed 1 year ago

byewokko commented 1 year ago

closes #223

Changes

Anonymous sessions are now algorithmic (to save database resources). Crucial session info is stored inside the cookie value (or access token) in a signed JWT format.
Anonymous algorithmic sessions have no expiration.
Added an anonymous session counter metric.
PKCE info is now stored in the authorization code collection rather than inside the session object.