Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TWO_FACTOR_VALIDITY changes. #823

Merged
merged 1 commit into from
Jul 25, 2023
Merged

TWO_FACTOR_VALIDITY changes. #823

merged 1 commit into from
Jul 25, 2023

Conversation

jwag956
Copy link
Member

@jwag956 jwag956 commented Jul 25, 2023

Now only a cookie is set - for both forms and JSON, and the tf_validity token is never returned as part of a JSON response. Probably overkill, but in the response containing the tf_validity cookie - we add the Vary: Cookie header.

@codecov
Copy link

codecov bot commented Jul 25, 2023

Codecov Report

Patch coverage: 100.00% and project coverage change: +0.02% 🎉

Comparison is base (58f93ef) 98.13% compared to head (108ecf9) 98.15%.

Additional details and impacted files
@@            Coverage Diff             @@
##           master     #823      +/-   ##
==========================================
+ Coverage   98.13%   98.15%   +0.02%     
==========================================
  Files          34       34              
  Lines        4458     4453       -5     
==========================================
- Hits         4375     4371       -4     
+ Misses         83       82       -1     
Files Changed Coverage Δ
flask_security/webauthn.py 98.57% <ø> (-0.01%) ⬇️
flask_security/tf_plugin.py 99.16% <100.00%> (-0.01%) ⬇️
flask_security/views.py 98.76% <100.00%> (+0.19%) ⬆️

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Now only a cookie is set - for both forms and JSON, and the tf_validity token is never returned as part of a JSON response.
Probably overkill, but in the response containing the tf_validity cookie - we add the Vary: Cookie header.
@jwag956 jwag956 merged commit 9dcf7ec into master Jul 25, 2023
16 checks passed
@jwag956 jwag956 deleted the tfvalid branch July 25, 2023 01:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant