Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Link token to domain #9

Open
sergiuchilat opened this issue Apr 27, 2024 · 0 comments
Open

Link token to domain #9

sergiuchilat opened this issue Apr 27, 2024 · 0 comments

Comments

@sergiuchilat
Copy link
Owner

sergiuchilat commented Apr 27, 2024

A token must be released for 1 domain only.
For example, authentication started from front.domainA.com.
When token is sent to api.domainA.com or other-api.domainA.com then token is valid and can be used by api and other-api.
But when token is sent to api.domainB.com or other-api.domainB.com then token is INvalid and can't be used by api and other-api.

Activation/deactivation of this feature must be based on CROSS_DOMAIN_TOKEN=0/1 environment value.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant