409 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
1
answer
78
views
Refresh Token Rotation lead to Infinite Time logged in
Currently, I am trying to implement access token and refresh token in my application.
I am storing the refresh token in the user schema.
interface IUser {
refreshTokens: []
}
When the user logs ...
0
votes
0
answers
19
views
modify saml assertion cookie to reflect new domain
I'm working in asp.net mvc
To achieve cross-domain re-auth I'm relying on AJAX call where I return response with repost url and then js send request to repost url
I modify Controller.Response.Cookies ...
1
vote
1
answer
336
views
Failing to set cookie for SessionMiddleware due to 'invalid domain' (separate frontend/backend)
I set up Session Middleware with my FastAPI backend to authenticate my React frontend users, which worked with domain=127.0.0.1. Now that I've deployed both my frontend and my backend to two separate ...
2
votes
0
answers
647
views
AutoRefresh/Logout in Directus SDK fails (400 Bad Request - refresh_token is required in either JSON payload or Cookie)
I am trying to set up an authentication logic using Directus SDK and Next.js for the front end.
Here is the directus.js which contains the initial SDK configuration:
const directus = createDirectus(...
1
vote
0
answers
253
views
Is it possible to bypass JWT authentication if you know the secret key but not the timestamp?
I found an interesting website with a JWT bypass vulnerability. It uses a simple secret key that can be discovered using brute force, which I did. However, I couldn't exploit the vulnerability because ...
0
votes
1
answer
294
views
In Springboot how to configure http only response cookie (refresh token) from subdomain (api.example.com)
I have my frontend running on "https://example.com" and backend running on "https://api.example.com".
From backend, the login endpoint "https://api.example.com/auth/login"...
0
votes
1
answer
667
views
Refresh Token cannot be written into the browser's cookies
I encountered a strange situation. My project uses an HTTP-only refresh token. After the user successfully completes the login verification, the backend sends an HTTP-only refresh token to the ...
1
vote
0
answers
135
views
http only cookie alternative in react native
i have got web project using mern stack where i store the jwt as an http only cookie, so that when user authenticates themselves, it is not required to pass the token as a header.
however, i will also ...
2
votes
1
answer
3k
views
Setting and sending http only cookies from Next.js 14 to Express.js
I have an express.js (node.js) as my backend, and next.js v. 14 as my frontend.
In the backend, I can send the cookie just fine, and I can protect certain endpoints also with the cookie. However, I ...
0
votes
0
answers
100
views
How to implement http-only cookie auth from aws hosted backend to locally hosted frontend?
When your backend is deployed to aws and you have to develop http cookie authentication to a locally hosted reactjs frontend how do you implement it?
The issue is..
When I call the login API endpoint ...
1
vote
1
answer
341
views
How to send or post cookie from client to server in .net
I have implemented this code to request a page and read the cookies set by the server:
myURI = new Uri(strURI);
request = (HttpWebRequest)HttpWebRequest.Create(myURI);
request.CookieContainer = new ...
0
votes
1
answer
284
views
Custom cookies not created in Firefox - NS_BINDING_ABORTED
This is an ASP.NET MVC application. The cookies are not getting created in Firefox. There is no such issue in Chrome or Edge.
HttpCookie myCookie = new HttpCookie("myCookie")
{
Value = &...
0
votes
1
answer
146
views
Spring boot, cookies on ip address domain
My server works on localhost and my VPN address (26.185.15.150), when I make request to http://localhost:3500/login/auth, I get correctly response and cookies. When I make request to http://26.185.15....
0
votes
0
answers
356
views
Get cookie from another application in an angular application
Is it possible to get a cookie stored by other application when the user clicked an hyperlink with target to the angular application?
java application ---> angular application
both application are ...
1
vote
1
answer
652
views
simpleJWT and dj-rest-auth Cookie based authorization
Between dj-rest-auth and simpleJWT I have been able to send the set-cookie messages, store the cookies in the browser, and send them back with each request (Axios' with credentials = true), but it ...