sasjs / server

Build Apps on Base SAS
https://server.sasjs.io
MIT License
20 stars 3 forks source link

fix(cookie): XSRF cookie is removed and passed token in head section #248

Closed saadjutt01 closed 2 years ago

saadjutt01 commented 2 years ago

Issue

Applications needs to be authenticated with API server on different domain. And fixes #125, #242

Intent

Cookie based authentication should work along CSRF protection.

Implementation

Instead of sending CSRF Token from server via cookie, now it will be provided in head section. Any request which was meant to get CSRF token, should process response extract CSRF token and save in cookie involves

Checks

ghost commented 2 years ago

:tada: This PR is included in version 0.14.1 :tada:

The release is available on:

Your semantic-release bot :package::rocket: