Skip to content

Instantly share code, notes, and snippets.

@MarcelineVQ
Last active July 12, 2020 15:02
Show Gist options
  • Save MarcelineVQ/7ad5ecf82be812575975424e9cd216b4 to your computer and use it in GitHub Desktop.
Save MarcelineVQ/7ad5ecf82be812575975424e9cd216b4 to your computer and use it in GitHub Desktop.
Jul 09 04:02:09 <kiwi_45> dmj`: what should I do now ?
Jul 09 04:02:21 * cosimone (~cosimone@2001:b07:ae5:db26:9520:741c:a5e9:2223) has joined
Jul 09 04:02:33 <Marked> Oh thanks
Jul 09 04:03:02 <dmj`> kiwi_45: you do as I tell you, use the cookie package since servant auth lacks HttpOnly it seems
Jul 09 04:03:41 <dmj`> kiwi_45: you are going to need to make a session token that you store in the cookie, this can be a UUID for now or anything really, some people use JWTs for this, but meh.
Jul 09 04:04:20 <dmj`> kiwi_45: Cookies with HttpOnly using Https (is secure), is a good first step
Jul 09 04:04:51 * kiwi_45 has quit (Quit: Ping timeout (120 seconds))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment