Adds user_secret validation for auth_token and refresh_token#80

Open

henrikwirth wants to merge 3 commits intodevelopfrom feature/#79-add-user-secret-validation

+82-7,305

Commits on Feb 15, 2020

Adds user_secret also to auth_token and validates refresh_token and auth_token, so that the user_secret in the token is the same as the in the DB. If a user refreshes the user_secret, it therefore …
henrikwirth
committed
Adds flag, so we can implement somewhat an option for the user to opt in/out of the stateful auth_token.
henrikwirth
committed

Commits on Feb 16, 2020

kidunot asked me to add this to the pr, so the content of the _output folder won't be commited.
henrikwirth
committed