Stéphane Épardaud
Stéphane Épardaud
> Hi @gsmet @FroMage, is this PR still desired? Should I rebase again waiting for a review? Yes please. Sorry about the delays :(
The first test failure seems related to this fix, no?
Well, we'll see if this occurs again.
> But if we have JWT mechanism verifying tokens stored in cookies it only means there is another interactive authentication mechanism which was used originally to authenticate with the authenticated...
I've decided to go with a replacement of this class to support my use-case: https://github.com/quarkiverse/quarkus-renarde/blob/main/runtime/src/main/java/io/quarkiverse/renarde/util/RenardeJWTAuthMechanism.java
Guaranteeing the queue ordering is a good thing. As for `close` being synchronous instead of async, it would permit people to ignore the values returned from `send` but it would...
> Is there a reason why this method is not setting a HTTPOnly-Cookie? In my view this would increase the security and shouldn't give any negative impact. No reason, and...
That's odd, because Renarde sets this config. Can you try `quarkus.http.auth.proactive=false` to see if it makes any difference?
Sorry about the delay. So, we have several things here. [Twitter docs](https://developer.twitter.com/en/docs/authentication/oauth-2-0/authorization-code) say: > # How long will my credentials stay valid? > By default, the access token you create...
Perhaps @sberyozkin has some particular insight too.