dwyl / dwyl/hapi-auth-jwt2-example

question about using JWT cookie storage

Open
#25 2 comments 0 reactions 0 assignees View on GitHub
help wanted question
Dominant language
JavaScript
Stars
47
Forks
8
PR merge metrics
No merged PRs in 30d

Description

Running the example on my computer, from chrome doing two GET request (login and restricted resource):
1) FIRST:
http://localhost:8000/auth
in the server response, in the header set cookie: token=...................................... as expected
2) THEN:
http://localhost:8000/restricted
{"statusCode":401,"error":"Unauthorized","message":"Missing authentication"}

I expected that the cookie setted by the auth request(1) was set by the browser to restricted and so It should be authenticated. Using chrome console seems that the cookie of the first response
is not used in the second request.
It's correct?

Can someone explain if I miss something?

For example from this article reading: https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage when explain 'JWT Cookie Storage'

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.