Skip to content

feat: enhance authentication flow and cookie management#137

Open
Jenola344 wants to merge 1 commit into
Savitura:mainfrom
Jenola344:main
Open

feat: enhance authentication flow and cookie management#137
Jenola344 wants to merge 1 commit into
Savitura:mainfrom
Jenola344:main

Conversation

@Jenola344
Copy link
Copy Markdown

@Jenola344 Jenola344 commented May 30, 2026

Closes #134


  • Updated CORS configuration to allow credentials.
  • Modified authentication middleware to check for token in cookies.
  • Implemented access token cookie management in auth routes.
  • Refactored frontend AuthContext to remove token state management.
  • Adjusted API service to remove token parameter from requests.
  • Updated various components to handle user state without direct token access.
  • Added cookie handling for access tokens in login and registration flows.
  • Improved admin dashboard and campaign management to align with new auth structure.

- Updated CORS configuration to allow credentials.
- Modified authentication middleware to check for token in cookies.
- Implemented access token cookie management in auth routes.
- Refactored frontend AuthContext to remove token state management.
- Adjusted API service to remove token parameter from requests.
- Updated various components to handle user state without direct token access.
- Added cookie handling for access tokens in login and registration flows.
- Improved admin dashboard and campaign management to align with new auth structure.
@drips-wave
Copy link
Copy Markdown

drips-wave Bot commented May 30, 2026

@Jenola344 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

JWT stored in localStorage is vulnerable to XSS — migrate to httpOnly cookies

1 participant