goLang-jwt-auth-example

goLang-jwt-auth-example copied to clipboard

Discussion: Better way to store refresh tokens

3

I find it a bit odd that BOTH access and refresh tokens are submitted with every API request in a cookie. This seems reasonable, given the web consensus is that...

ernsheong

incon

Disputing advice to SHA256 password before sending to server

2

First up, thanks for this. I was looking for a concrete example, and here it is! > Password is SHA256 hashed on the client before being sent to the server...

ernsheong