 Marcus Efraimsson
|
fb3c510178
Merge branch 'master' into delete_session_on_logout
|
6 anni fa |
 bergquist
|
a6bd2c73a0
introduce samesite setting for login cookie
|
6 anni fa |
|
bergquist
|
a1b3986532
always delete session cookie even if db delete fails
|
6 anni fa |
|
bergquist
|
91bd908e03
adds more tests signing out session
|
6 anni fa |
|
bergquist
|
11c4967bdc
changes some info logging to debug
|
6 anni fa |
|
bergquist
|
88ca54eba9
renames signout function
|
6 anni fa |
|
bergquist
|
43ac79685a
delete auth token on signout
|
6 anni fa |
|
bergquist
|
75760aa892
dont specify domain for auth cookies
|
7 anni fa |
|
bergquist
|
d6edaa1328
moves cookie https setting to [security]
|
7 anni fa |
|
bergquist
|
516037fbdd
makes sure rotation is always higher than urgent rotation
|
7 anni fa |
|
bergquist
|
56a521b264
makes auth token rotation time configurable
|
7 anni fa |
|
bergquist
|
12f8338977
stores hashed state code in cookie
|
7 anni fa |
|
bergquist
|
d3ec8e1ccb
creates new config section for login settings
|
7 anni fa |
|
Marcus Efraimsson
|
4096449aec
extract auth token interface and remove auth token from context
|
7 anni fa |
|
Marcus Efraimsson
|
366e356e08
more auth token tests
|
7 anni fa |
|
bergquist
|
777bd9ea18
adds cleanup job for old session tokens
|
7 anni fa |
|
Marcus Efraimsson
|
38efc1d7d2
s/print/log
|
7 anni fa |
|
bergquist
|
92620af75f
avoid calling now() multiple times
|
7 anni fa |
|
Marcus Efraimsson
|
dd8476d81a
passing auth token tests
|
7 anni fa |
|
Marcus Efraimsson
|
565408194a
handle expired tokens
|
7 anni fa |
|
bergquist
|
697ddccd8e
set userToken on request when logging in
|
7 anni fa |
|
bergquist
|
55b3013eb3
moves initWithToken to auth package
|
7 anni fa |
|
Marcus Efraimsson
|
734a7d38b2
set cookie name from configuration
|
7 anni fa |
|
Marcus Efraimsson
|
766cfab374
change rotate time
|
7 anni fa |
|
Marcus Efraimsson
|
0d1e3759eb
mixor fixes
|
7 anni fa |
|
bergquist
|
2e97d39abe
removes commented code
|
7 anni fa |
|
bergquist
|
47a7d93fd9
moves rotation into auth since both happens before c.Next()
|
7 anni fa |
|
bergquist
|
fd937e3d95
remove maxage from session token
|
7 anni fa |
|
bergquist
|
c2accfa4c0
inital code for rotate
|
7 anni fa |
|
bergquist
|
aba6148c43
login users based on token cookie
|
7 anni fa |
