Use httpOnly cookies for authentication - Githubissues

sef-global / scholarx-backend

This is the backend of the ScholarX

MIT License

10 stars 37 forks source link

Use httpOnly cookies for authentication #59

Closed anjula-sack closed 1 year ago

anjula-sack commented 1 year ago

Purpose

The purpose of this PR is to fix #60 and fix #61

Goals

To improve security by using httpOnly cookies

Approach

Update the auth to use httpOnly cookies
Add the logout endpoint

Screenshots

Checklist

[x] This PR doesn't commit any keys, passwords, tokens, usernames, or other secrets.
[x] I have read and understood the development best practices guidelines ( http://bit.ly/sef-best-practices )
[x] My code follows the style guidelines of this project
[x] I have performed a self-review of my own code
[ ] I have commented my code, particularly in hard-to-understand areas
[ ] I have made corresponding changes to the documentation