-
Notifications
You must be signed in to change notification settings - Fork 2.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(frontend): update cookie module #8862
fix(frontend): update cookie module #8862
Conversation
HttpServletResponse servletResponse = mock(HttpServletResponse.class); | ||
FilterChain filterChain = mock(FilterChain.class); | ||
Actor actor = new Actor(ActorType.USER, "datahub"); | ||
// String token = _statefulTokenService.generateAccessToken(TokenType.SESSION, actor, 0L, System.currentTimeMillis(), "token", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why is this commented out? If it's not used might as well delete.
Is there no need to test the stateful token service?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This shows how the token was generated, I left in to make it more obvious
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's not super intuitive to know how the token is generated otherwise so I'd prefer to leave it in for anyone who wants to make a similar test and looks through this file if it doesn't bother you too much :)
Still has some checkstyle issues |
NOTE: This is a breaking change for the session cookies. All previously created session cookies will be invalid regardless of their expiration time and users will have to login again. There should be no other issues with this change.
Updates session cookie configuration to utilize better security practices.
Checklist