Prioritise authentication with user credentials over refresh token if both are sent.

usefulteam / jwt-auth

WordPress JSON Web Token Authentication

https://wordpress.org/plugins/jwt-auth/

124 stars 50 forks source link

Prioritise authentication with user credentials over refresh token if both are sent. #130

Closed dominic-ks closed 1 month ago

dominic-ks commented 2 months ago

Addressing the issue reported here:

https://github.com/usefulteam/jwt-auth/issues/127

I also added some checks so that we can handle cases where a username is provided and no password or vice versa so that we don't log someone in based on a refresh token purely because an invalid request has been made.