search

labd / node-federated-token

Tokens for federated services
MIT License
1 stars 0 forks source link

Refactor the logic around handling public tokens #5

Closed mvantellingen closed 1 year ago

mvantellingen commented 1 year ago

This introduces TokenSource interface which allows us to retrieve the tokens either from cookies or from headers (or both).

When cookies are used it also adds additional security items like fingerprints and setting some cookies as http-only and some not