jwt-csrf
jwt-csrf copied to clipboard
Stateless CSRF protection using jsonwebtoken (JWT)
In `Readme.md` file there is no information that this package relies on `cookie-parser` express middleware existence. Consider reading and writing cookies directly by your package. There is also no information...
There should be a way to exclude certain domains when making post requests. Sometimes, the request could be posted to another domain. There is no need to send the token...
Problem: a) User calls to generate header token with UID X b) Header token gets dropped on request end with UID Y c) Cookie gets dropped with UID Y The...
Hey guys, I am having the following problem: - browser renders the application - javascript makes 2-5 concurrent requests - library throw error, since cookie id doesnt match header id...
I think the main idea to use JWT for stateless verification is great, however it would be nice to support apps with full page reloads. i think that using only...