Skip to content

Commit

Permalink
Update refresh token path
Browse files Browse the repository at this point in the history
  • Loading branch information
campb303 committed Feb 3, 2021
1 parent c02fae3 commit db580ee
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion api/api.py
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
# Restrict cookies using SameSite=strict flag
app.config["JWT_COOKIE_SAMESITE"] = "strict"
# Restrict refresh tokens to /token/refresh endpoint
app.config["JWT_REFRESH_COOKIE_PATH"] = '/tokens/refresh'
app.config["JWT_REFRESH_COOKIE_PATH"] = '/api/tokens/refresh'
# Set the cookie key for CRSF validation string
# This is the default value. Adding it for easy reference
app.config["JWT_REFRESH_CSRF_HEADER_NAME"] = "X-CSRF-TOKEN"
Expand Down

0 comments on commit db580ee

Please sign in to comment.