Alex Krupp comments

Results 19 comments of


                                            Alex Krupp

Don't verify token expiration on token refresh.

> When a token is expired and you try to refresh it inside of the refresh interval. It does not refresh, because the refresh endpoints checks if the token is...

Don't verify token expiration on token refresh.

@Koomook > Then why refresh mechanism exists? Think about the way your bank's website works. Once you log in, you're probably allowed to keep using the site for up to...

Don't verify token expiration on token refresh.

@pmferreira3 The way we do it is every time we make a request from the front end to the API, there is a request interceptor that checks how much time...

Is this project still active?

I'm using it as a dependency for a bunch of projects. If it ever gets to the point where there are issues with the newest versions of Django or DRF...

Security vulnerability that allows hijacking another user's account

This library comes with the ability to have a per-user UUID to use as a secret, which you can just rotate when a user changes their username. The basic concept...

Invalid signature error second time that I try to change the email in DRF

In between tests, you need to do `user.refresh_from_db()`. There is basically a bug in DRF that necessitates this workaround.

How to change login_url

@MarkusH Thanks! I'm going to take a pass on contributing this time around only because it's my last week consulting for a client whose using this as a dependency. But...

httplib2.Http() generates cache keys that exceed memcached max length

Yeah, the Google API is also where I ran into this. (Specifically doing searches using the Gmail API.)

Importing/referencing NgbAnything inside LazyModule breaks tree shaking

Has anyone tried this with the experimental esbuild mode for Angular CLI, and/or have any insight as to whether this might fix or ameliorate the problem? It looks like it...