May 16, 2015
View 0466c3f

Use secure csrf/session cookies when serving on HTTPS

Jordan Liggitt authored on 2015/05/16 21:54:18
May 15, 2015
View d9e02dc

Make csrf and session cookies httpOnly

Jordan Liggitt authored on 2015/05/15 16:23:06
February 10, 2015
View 26bb55f

Default session secret to unknowable value

Jordan Liggitt authored on 2015/02/10 16:57:54
January 28, 2015
View 7553618

Auto grant, make oauth sessions short, handle session decode failures

Jordan Liggitt authored on 2015/01/28 02:19:25
September 15, 2014
View e0e3a05

Add an OAuth2 server and authn abstractions

Clayton Coleman authored on 2014/09/15 10:54:01