Closed Incremental92 closed 3 years ago
Thanks for your information, I have to read all the doc, but with which protocol does it work with October ? 2) I'm would like to avoid trying to update profile after the token is expired, so with which endpoint could I check its validity ?
What do you mean by protocol
? HTTP?
There is no specific endpoint to validate the token, 'cause any route that is protected by the middleware jwt.auth
already does it by default.
Sorry I meant Algorithm
Oh, in this case, you can check the Plugin configuration at the OctoberCMS Backend. By, if I'm not mistaken it will use by default HS256
algo.
Ahoj, it seems that after a Login, the token is expiring after some time. For me it's OK for the security side.
1) What is the proper way to reconnect ? Login again ?
2) When modifying profile or password after an authentication, how could I test if the token is still valid (user not deactivated or token not expired) ? Should I perform my profile modification and then manage errors, or could I test if the token is still valid before and how ? Is it the purpose of Refresh Token endpoint ? Thanks