Skip to content
This repository was archived by the owner on Mar 22, 2022. It is now read-only.

jwt ssl warning #214

Merged
merged 2 commits into from
Jun 9, 2016
Merged

Conversation

aboutlo
Copy link
Contributor

@aboutlo aboutlo commented May 30, 2016

  • Fire a warning if the request is insecure rather than refusing to send the cookie.
  • Allow override a single cookie property

Please have a look https://github.com/feathersjs/feathers-authentication/compare/master...aboutlo:ls-JWT-ssl-warning?diff=unified&expand=1&name=ls-JWT-ssl-warning#diff-1fdf421c05c1140f6d71444ea2b27638L60

In my opinion app.get('auth') is always undefined at this stage.

@@ -32,7 +32,7 @@ const defaults = {
cookie: {
name: 'feathers-jwt',
httpOnly: false,
secure: process.env.NODE_ENV === 'production' ? true : false
secure: process.env.NODE_ENV === 'production'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 Thank you!

@ekryski
Copy link
Member

ekryski commented May 30, 2016

@aboutlo this is awesome! Nice work! I think we do need app.get('auth') from what I explained above. I probably need to add a test for that. If you can add that back in this is good to go! 🍻

@aboutlo aboutlo force-pushed the ls-JWT-ssl-warning branch from fc3c054 to 7ed2fda Compare May 30, 2016 17:16
@aboutlo
Copy link
Contributor Author

aboutlo commented May 30, 2016

Thank you @ekryski for the kind words. I added back app.get('auth'). Tests are still green :)

@daffl
Copy link
Member

daffl commented Jun 9, 2016

Oh sorry, this was totally good to go to. I'll merge it in, it'll make it into the next release.

@daffl daffl merged commit 107957d into feathersjs-ecosystem:master Jun 9, 2016
@ekryski
Copy link
Member

ekryski commented Jun 9, 2016

Yup :shipit:

@aboutlo
Copy link
Contributor Author

aboutlo commented Jun 9, 2016

cool

@ekryski
Copy link
Member

ekryski commented Jun 20, 2016

Released v0.7.9 with this fix in! 🍻 @aboutlo!

# for free to subscribe to this conversation on GitHub. Already have an account? #.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants