Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

#541 Check for refresh cookie when JWT_AUTH_HTTPONLY is True #572

Merged
merged 2 commits into from
Nov 26, 2023

Conversation

Routhinator
Copy link
Contributor

This conditionally checks cookies for the refresh token to blacklist when black list is enabled and JWT_AUTH_HTTPONLY is true, in order to address errors when attempting to use the /auth/logout endpoint when both are enabled.

This addresses #541

@Routhinator
Copy link
Contributor Author

Hmm 🤔 - failing check doesn't seem to have to do with this change.. looks like the upstream, looking at it.

@Routhinator
Copy link
Contributor Author

Nope that was me 🤦 - should be passing now.

@iMerica iMerica merged commit ae093a4 into iMerica:master Nov 26, 2023
3 checks passed
quitterie-lcs added a commit to openfun/marsha that referenced this pull request Apr 25, 2024
In `dj-rest-auth` 5.1.0, a conditional check is made on JWT_AUTH_HTTPONLY set to
True to check cookies for the refresh token. To avoid this new behavior,
JWT_AUTH_HTTPONLY is deactivated. (see
iMerica/dj-rest-auth#572)
lunika pushed a commit to openfun/marsha that referenced this pull request Jun 4, 2024
In `dj-rest-auth` 5.1.0, a conditional check is made on JWT_AUTH_HTTPONLY set to
True to check cookies for the refresh token. To avoid this new behavior,
JWT_AUTH_HTTPONLY is deactivated. (see
iMerica/dj-rest-auth#572)
lunika pushed a commit to openfun/marsha that referenced this pull request Jun 4, 2024
In `dj-rest-auth` 5.1.0, a conditional check is made on JWT_AUTH_HTTPONLY set to
True to check cookies for the refresh token. To avoid this new behavior,
JWT_AUTH_HTTPONLY is deactivated. (see
iMerica/dj-rest-auth#572)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants