express-secure-skeleton icon indicating copy to clipboard operation
express-secure-skeleton copied to clipboard

'Protect index file to only Auth'd users. Skeleton Auth functions.

Open mattjay opened this issue 11 years ago • 0 comments

Wrote some skeleton auth functions that would plug in to a user model to check if authenticated before allowing to see the index.

From what I can tell the way this works is not a secure handling of cookies and is vulnerable to (at least) session fixation.

Felt like this was most of the legwork though and would love to see how you could spin this to use cookies correctly.

mattjay avatar May 28 '13 20:05 mattjay