* Users are only authenticated against their password on login, and to retrieve a token. * Passwords are wiped from the app and cookies after login and token retrieval * Tokens are revoked at the end of the session/logout * If the user chooses the "remember me" option, the token is stored in the cookie * A user interface to revoke tokens will be added * Tokens correctly delete themselves on logout * API documentation updated for the new user-token endpoints * Added a Manage tokens tab to the user panel * Added bullet point about the token authentication for the API * Added tests for new endpoints and tests against authentication middleware
7 lines
No EOL
66 B
Text
7 lines
No EOL
66 B
Text
config.yaml
|
|
*/*_modules/
|
|
.coverage
|
|
.cache
|
|
__pycache__
|
|
.idea/
|
|
*.iml |