glm94/secure-core
1
0
Fork 0
Code Issues 9 Pull Requests Releases Wiki Activity

Cross Site Request Forgery Token Interface #8

New Issue
Open
opened 2021-06-25 09:24:07 -05:00 by glm94 · 1 comment
glm94 commented 2021-06-25 09:24:07 -05:00
Owner
Copy Link
Copy Source

A way to get CSRF tokens should be implemented, this way the client can get one and not worry about managing it. These tokens will need to be treated a bit different than a standard session token of course, so their expiration times should be much shorter.

A way to get CSRF tokens should be implemented, this way the client can get one and not worry about managing it. These tokens will need to be treated a bit different than a standard session token of course, so their expiration times should be much shorter.
glm94 added the enhancement label 2021-06-25 09:24:07 -05:00
glm94 commented 2021-06-30 09:08:07 -05:00
Author
Owner
Copy Link
Copy Source

The endpoint for this and just about anything like it should probably be guarded by requiring a signed API key, not just allowing an end user that's logged in to fetch tokens as they please.

The endpoint for this and just about anything like it should probably be guarded by requiring a signed API key, not just allowing an end user that's logged in to fetch tokens as they please.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No labels enhancement
Milestone
No items
No Milestone
Assignees
Clear assignees
glm94 (Garritt McCune)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: glm94/secure-core#8