wip/authorization-header
revoke will not be changed however, we'll have a separate endpoint for logout
wip/authorization-header
apparently actix has a built in for this, ill implement it
let mut refresh_token_cookie = refresh_token_cookie(refresh_token);
refresh_token_cookie.make_removal();
return…
wip/authorization-header
@sauceyred wrote in gorb/backend#7 (comment):
@radical wrote in #7 (comment):
@sauceyred wrote in #7 (comment):
@radical wrote in #7…
wip/authorization-header
also why does the backend need to set it to 0, shouldnt the frontend just remove the token if it gets a 401?
wip/authorization-header
@sauceyred wrote in gorb/backend#7 (comment):
@radical wrote in #7 (comment):
@sauceyred wrote in #7 (comment):
Please add `Set-Cookie:…
wip/authorization-header
@sauceyred wrote in gorb/backend#7 (comment):
Please add
Set-Cookie: refresh_token={token}; HttpOnly; Secure; SameSite=None; Path=/api/; Max-Age=0
to the…