Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reuse session csrf token #28

Merged
merged 11 commits into from
Aug 16, 2023
Merged

Reuse session csrf token #28

merged 11 commits into from
Aug 16, 2023

Commits on Aug 13, 2023

  1. feat: reuse session csrf tokens when possible 

    This allows multiple tabs to be open at the same time, without
compromising security.

Now, the cookie includes both a hash and the token, separated by "|".
This allows the token generator to extract the token from an existing
csrf session cookie and reuse it.
    @davidgonmar
    davidgonmar committed Aug 13, 2023
    Configuration menu
    Copy the full SHA
    d249bfe View commit details
    Browse the repository at this point in the history

Commits on Aug 14, 2023

  1. feat: add overwrite param to generateToken

    @davidgonmar
    davidgonmar committed Aug 14, 2023
    Configuration menu
    Copy the full SHA
    680c161 View commit details
    Browse the repository at this point in the history

Commits on Aug 15, 2023

  1. fix: misuse of regular inequality

    @davidgonmar
    davidgonmar committed Aug 15, 2023
    Configuration menu
    Copy the full SHA
    85f3337 View commit details
    Browse the repository at this point in the history

  2. test: update wording to match the new functionality

    @davidgonmar
    davidgonmar committed Aug 15, 2023
    Configuration menu
    Copy the full SHA
    9b0f021 View commit details
    Browse the repository at this point in the history

  3. fix: attach CsrfTokenCreator type to generateToken

    @davidgonmar
    davidgonmar committed Aug 15, 2023
    Configuration menu
    Copy the full SHA
    0eb8164 View commit details
    Browse the repository at this point in the history

  4. test: add test for generateToken and fix wording

    @davidgonmar
    davidgonmar committed Aug 15, 2023
    Configuration menu
    Copy the full SHA
    621a670 View commit details
    Browse the repository at this point in the history

  5. style: fix eslint type inference error

    @davidgonmar
    davidgonmar committed Aug 15, 2023
    Configuration menu
    Copy the full SHA
    a2c7304 View commit details
    Browse the repository at this point in the history

  6. docs: update README to reflect new functionality

    @davidgonmar
    davidgonmar committed Aug 15, 2023
    Configuration menu
    Copy the full SHA
    a137b74 View commit details
    Browse the repository at this point in the history

Commits on Aug 16, 2023

  1. docs: update docs to match new changes/better readability

    @davidgonmar
    davidgonmar committed Aug 16, 2023
    Configuration menu
    Copy the full SHA
    dfa1c42 View commit details
    Browse the repository at this point in the history

  2. feat: make generateToken overwrite param default to false

    @davidgonmar
    davidgonmar committed Aug 16, 2023
    Configuration menu
    Copy the full SHA
    15890aa View commit details
    Browse the repository at this point in the history

  3. test: adopt that overwrite is false by default

    @davidgonmar
    davidgonmar committed Aug 16, 2023
    Configuration menu
    Copy the full SHA
    0213459 View commit details
    Browse the repository at this point in the history