foal
foal copied to clipboard
Full-featured Node.js framework, with no complexity. 🚀 Simple and easy to use, TypeScript-based and well-documented.
Hello, everyone! Version 1 is finally out and so I will be able to **do more communication** on the framework! To do this, I'd like to know what *you* like/love...
# Issue Resetting passwords is something common. Maybe Foal should provide components to be able to do it with an email sending. # Resources https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Forgot_Password_Cheat_Sheet.md
## Issue Currently, Foal allows users to be authenticated through social providers. Through social services, the application can authenticate users with Google, for example, and in return get user information...
Although the framework provides authenticating and fetching user from database, it seems to miss `remember me` functionality. Would be great if there was a built-in way to do this. Laravel...
Hi, I'm opening a new issue as you asked it in [#880](https://github.com/FoalTS/foal/issues/880#issuecomment-1218311630) I took a deep dive into the Typescript type system and was able to come up with a...
I'm wondering if the documentation should be updated? There is no mention under https://foalts.org/docs/authentication-and-access-control/session-tokens of having to call commit to sessions but it doesn't appears sessions are stored in Redis...
v2.11.0
# Features - [x] Increase password hashing iterations (PR: #1149) - [ ] Add are more useful methods to the `MongoDBStore` (PR: #1142)
I see that createApp sets the Strict-Transport-Security header to 'max-age=15552000; includeSubDomains' Is there a reason it is 15552000 rather than the usual best practice value of 31536000? I tried to...
# Issue The MongoDB session store service is missing some functions, which we needed in a past project. In that, we were using FoalTS with MongoDB, and we extended those...
Although it is possible to add premiddleware to intercept the request before it is processed by foal's core. It is better to simply pass the raw express response object to...