pvarki / python-rasenmaeher-api

1 stars 0 forks source link

Auto-consume any nonces in JWTs in auth middleware #69

Open rambo opened 10 months ago

rambo commented 10 months ago

To make sure JWTs that should only be used for creating one logintoken cannot be abused for other things.

This will break a bunch of tests that abuse tilauspalvelu JWTs, see https://github.com/pvarki/python-rasenmaeher-api/tree/autouse_nonces