search

lanterndevs / Lantern-Client

GNU Affero General Public License v3.0
3 stars 1 forks source link

Phase out use of authentication context, add refresh cookie #32

Open awesomeaiden opened 2 years ago

awesomeaiden commented 2 years ago

Phase out use of authentication context. Instead, use cookies. With cookies, switch to refresh token (cookie with long lifespan) to periodically get new auth token (cookie with short lifespan). That way the actual auth tokens will have a short lifespan (how do we keep the refresh token secure though?).

Corresponds with Server issue 41.

awesomeaiden commented 2 years ago

Somewhat related client issue: #67