Imbolc
Imbolc
What do you think on this approach: https://github.com/imbolc/axum-live-view/commit/c3a8d85cb6f3c665c073c4ce4cde746ce73eb5e1 We pass a random token in a cookie (is should be `SameSite` or something, I haven't dig into this). Js part reads...
I was thinking on why Phoenix uses html meta tag to pass csrf token and found a little issue with using cookies for this puprose. There's a little gap between...
Hmm... I don't even see how using meta tag would help, as we still need a cookie for the browser to send it back. Meta tag would actually make it...
@genusistimelord could elaborate on issues with the approach I'm suggesting?
> the issue is as you say Do I understand correctly that you don't see other issues with the implementation? I mean isn't this one seems negligible? I'm not sure...
@genusistimelord would it be correct to adapt your suggestion like this? - on html request: - generate a random token - keep it in some kind of registry on server...
> the issue would not be a reconnection it would cause the codes to collide if they were on multiple pages That's right, but wouldn't the collision in turn lead...
> Personally it should never reconnect you In case of websocket reconnection is rather mundane. Also, as I understand, the token is used only on the handshake phase, there's no...
What I'm suggesting won't hurt dark themes. Quite the opposite - it would utilize the foreground color of a particular theme. Why would one use a theme if they don't...
> Do you want to change the default color, or do you miss a configuration option? Neither. I'm suggesting not changing the default color. For example, if you do echo...