Comments (2)
pilcrowOnPaper
commented on July 24, 2024
A possible solution is to store an encrypted refresh token as a http-only cookie. Since it's encrypted it should be safe to expose. We can decrypt the cookie and sent it via the authorization header.
This will remove the refreshAccessToken() server api, but replaced with a refresh access token endpoint. The user can accept CORS by enabling it by themselves but not sure if that should be recommended.
from lucia.
pilcrowOnPaper
commented on July 24, 2024
Fixed with #3
from lucia.
Related Issues (20)
- oauth and nuxt tutortial (using mongodb)
- [Feature Request]: Telegram Mini App AND Lucia Auth HOT 1
- [Bug]: @lucia-auth/adapter-prisma HOT 1
- [Bug]: switch to hash @node-rs/argon2 breaks sveltekit production builds HOT 16
- [Feature Request]: battle.net HOT 1
- [Bug]: TypeError [ERR_INVALID_ARG_TYPE]: The "string" argument must be of type string or an instance of Buffer or ArrayBuffer. Received an instance of Date HOT 7
- [Bug]: Session validate response is null, validateSession returns null HOT 5
- [Docs]: missing import in example code HOT 4
- [Docs]: Code example with astro integration not working HOT 1
- [Docs]: Astro passwort/username guide contain typo HOT 1
- how can i define a one to one extra DatabaseUserAttributes HOT 6
- [Docs]: typo in docs, related to nextJs HOT 3
- [Docs]: Usage of MongoDb adapter HOT 1
- [Bug]: Could not resolve "lucia/utils" when running 'wrangler dev' HOT 1
- [Docs]: Astro CSRF protection
- [Docs]: OAuth docs HOT 3
- [Bug]: Error: × You're importing a component that needs next/headers. That only works in a Server Component which is not supported in the pages/ directory. HOT 4
- [Docs]: Database integration and data model names enforcement
- [Bug]: Typescript performance issue HOT 1
- [Feature Request]: deleteUserSessions except for the current HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lucia.