Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🐛 Not update cookies when is a batch request #1577

Conversation

djpremier
Copy link
Contributor

Due to the batch requests approach, when this occurs the header has a blank token for the other requests and with that the current logic invalidates the cookie, as it is automatically updated by the back-end without any control from the client (browser) , for those cases due to ignore any change in them to keep what was received in the last valid request (in theory the first received that was not treated as a batch).

@MaicolBen
Copy link
Collaborator

@djpremier can you rebase to make sure tests pass?

@djpremier
Copy link
Contributor Author

@djpremier can you rebase to make sure tests pass?

Hi Maicol, yes, one a moment.

@djpremier djpremier force-pushed the security/dont-change-cookies-on-batch-requests branch from 4e64ffd to aaf25c0 Compare April 7, 2023 19:58
@MaicolBen
Copy link
Collaborator

one spec fails 😞

@djpremier djpremier force-pushed the security/dont-change-cookies-on-batch-requests branch from aaf25c0 to 0bdae2e Compare May 2, 2023 18:08
@djpremier
Copy link
Contributor Author

Hi @MaicolBen, now all tests work! 🎉

(I suspect it was sprockets fault as it also prevented me from uploading a "clean" project)

@MaicolBen MaicolBen merged commit e394c12 into lynndylanhurley:master Jun 2, 2023
ThiagoAnunciacao pushed a commit to ThiagoAnunciacao/devise_token_auth that referenced this pull request Jul 6, 2023
* 🐛 Not update cookies when is a batch request

* ✅ Fix confirmations controller test
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants