codemation / easyauth

Create a centralized Authentication and Authorization token server. Easily secure FastAPI endpoints based on Users, Groups, Roles or Permissions with very little database usage.
https://easyauth.readthedocs.io/en/latest/
MIT License
553 stars 52 forks source link

Improvement - Cookie Security (Secure & SameSite) & JWT Key Usage #43

Closed codemation closed 2 years ago

codemation commented 2 years ago

Description

This PR expands Cookie CORS Usability by enabling secure=True to EasyAuthServer.create( and EasyAuthClient.create( factory methods. EasyAuthServer.create(also has a new optional argumentprivate_key` which can be used to set a private_key at runtime instead of using from from or generating a new key pair.

Cookie CORS improvments

JWT - Key Changes