search

tuupola / slim-jwt-auth

PSR-7 and PSR-15 JWT Authentication Middleware
https://appelsiini.net/projects/slim-jwt-auth
MIT License
821 stars 140 forks source link

How to tackle with 2 authorization cookies #228

Open gohelkiran30 opened 1 year ago

gohelkiran30 commented 1 year ago

Is there any way to handle tokens from 2 different token values? Any one is present at a time. This is required for session cookies for different type of user.

For example, buyer login has a cookie with name buyer-token and seller login has a cookie with name seller-token.

If any one cookie is present than user should be authenticated.

Anyway to achieve this?

wallacio commented 1 year ago

My thoughts are that probably isn't the best way to approach your problem. I think that using a single token, specifying a role (or roles) in that would be more correct.

tuupola commented 1 year ago

You could create another middleware which looks for the two cookies and if one is found renames it to token and configure this middleware to look for cookie named token.