{{ message }}
Add ability to inject extra claims and xsrfToken - #248
Open
lwcolton wants to merge 6 commits into
Open
Conversation
added 6 commits
April 2, 2016 17:56
JWT generation functions were moved into the JWTFactory class. The JWTRequestAuthenticator class was added,and was made the parent class of ApiRequestAuthenticator, OAuthRequestAuthenticator, and OAuthClientCredentialsRequestAuthenticator. These three authenticator classes now allow specifying arbitrary key-value pairs to add in the JWT claims. The also now have support for auto-generating a uuid4 to be used as a CSRF token in the JWT, as described in the "Cookies" section of https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage/
Author
Contributor
|
Thanks for the PR! Going to review this as soon as I have a chance. I've been out on vacation, and am heading to a conference in NYC for a few days. Sorry for the delay :( |
Contributor
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
JWT generation functions were moved into the JWTFactory class.
The JWTRequestAuthenticator class was added,and was made the
parent class of ApiRequestAuthenticator, OAuthRequestAuthenticator,
and OAuthClientCredentialsRequestAuthenticator. These three
authenticator classes now allow specifying arbitrary key-value
pairs to add in the JWT claims. The also now have support for
auto-generating a uuid4 to be used as a CSRF token in the JWT,
as described in the "Cookies" section of
https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage/