summaryrefslogtreecommitdiff
path: root/app/middleware/token_parser.go
AgeCommit message (Collapse)Author
2025-05-28refactor: delete jwt verification codemo khan
2025-05-28refactor: extract RequestParser typemo khan
2025-05-15refactor: allow cookie parser to accept cookie namemo khan
2025-05-15refactor: inline usage of RawToken typemo khan
2025-05-11refactor: use same cookie names as envoy pluginmo khan
2025-05-08feat: use a cookie prefix to lock down the session cookiemo khan
> __Host-: If a cookie name has this prefix, it's accepted in a > Set-Cookie header only if it's also marked with the Secure attribute, > was sent from a secure origin, does not include a Domain attribute, > and has the Path attribute set to /. In other words, the cookie is > domain-locked. https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies#cookie_prefixes
2025-05-07refactor: use Mapper typemo khan
2025-05-07feat: digitally sign and verify cookie using randomly generated keymo khan
2025-05-07refactor: extract helper to log errors consistentlymo khan
2025-04-28feat: use htmx to render partialsmo khan