The Wayback Machine - https://web.archive.org/web/20210116090326/https://github.com/codecasts/laravel-jwt/pull/50
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allowed token detection methods to be defined in config file #50

Open
wants to merge 1 commit into
base: master
from

Conversation

@thetomcake
Copy link

@thetomcake thetomcake commented Dec 9, 2019

My use case was that only Authorization: Bearer should be allowed and not token via a GET or POST parameter.

The requirement for this is to remove the risk of CSRF or use of cross origin requests with stolen or compromised tokens.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked issues

Successfully merging this pull request may close these issues.

None yet

1 participant
You can’t perform that action at this time.