dwyl / dwyl/hapi-auth-jwt2-example
question about using JWT cookie storage
- Dominant language
- JavaScript
- Stars
- 47
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
Running the example on my computer, from chrome doing two GET request (login and restricted resource):
1) FIRST:
http://localhost:8000/auth
in the server response, in the header set cookie: token=...................................... as expected
2) THEN:
http://localhost:8000/restricted
{"statusCode":401,"error":"Unauthorized","message":"Missing authentication"}
I expected that the cookie setted by the auth request(1) was set by the browser to restricted and so It should be authenticated. Using chrome console seems that the cookie of the first response
is not used in the second request.
It's correct?
Can someone explain if I miss something?
For example from this article reading: https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage when explain 'JWT Cookie Storage'
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.