Skip to content

Commit

Permalink
Remove JWT Refresh path restriction
Browse files Browse the repository at this point in the history
  • Loading branch information
campb303 authored Mar 29, 2021
1 parent 79c9ba4 commit a5a185d
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions webqueue2_api/api.py
Original file line number Diff line number Diff line change
Expand Up @@ -40,8 +40,6 @@
app.config["JWT_COOKIE_SECURE"] = False if os.environ.get("ENVIRONMENT") == "dev" else True
# Restrict cookies using SameSite=strict flag
app.config["JWT_COOKIE_SAMESITE"] = "strict"
# Restrict refresh tokens to /token/refresh endpoint
app.config["JWT_REFRESH_COOKIE_PATH"] = '/tokens/refresh'
# Set the cookie key for CRSF validation string
# This is the default value. Adding it for easy reference
app.config["JWT_REFRESH_CSRF_HEADER_NAME"] = "X-CSRF-TOKEN"
Expand Down Expand Up @@ -249,4 +247,4 @@ def get(self) -> tuple:
api.add_resource(QueueList, "/api/get_queues")

if __name__ == "__main__":
app.run()
app.run()

0 comments on commit a5a185d

Please sign in to comment.