Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does DTA support HTTP Only Cookie Refresh tokens along site access tokens? #1371

Closed
aarona opened this issue Jan 11, 2020 · 2 comments
Closed

Comments

@aarona
Copy link

aarona commented Jan 11, 2020

Also, does it have JWT support? I'd like to have silent refresh support.

@aarona aarona changed the title Does DTA support HTTP Only Cookie Refresh tokens along side access tokens? Does DTA support HTTP Only Cookie Refresh tokens along site access tokens? Jan 17, 2020
@theblang
Copy link
Contributor

@aarona As of #1453 you can now use HttpOnly cookies for transferring the token. In #1281 I've also brought up adding the ability to turn off the token transfer via headers entirely for the security aspect.

@MaicolBen
Copy link
Collaborator

does it have JWT support?

It doesn't, feel free to add it. But I'd recommend just going straight to jwt and implement auth with that

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants