Rokojori
/
rokojori-auth-connector
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
4 Commits 1 Branch 0 Tags 57 KiB
Commit Graph

3 Commits

Author SHA1 Message Date
Rokojori cb2fba6e8b auth: Bearer-before-cookie token extraction; JWT_CLOCK_TOLERANCE for clock skew 
extractToken now checks Authorization: Bearer before the accessToken cookie so
injected headers (Electron, API clients) cannot be shadowed by stale cookies.
JWT_CLOCK_TOLERANCE env var (seconds) is passed to jwt.verify as clockTolerance
when non-zero — set in .env for local dev to absorb clock skew vs production.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-07-18 08:37:26 +02:00
Rokojori 0b06c252a3 Connector Update 2026-07-17 15:26:14 +02:00
Rokojori e2b37b8820 Initial Commit 2026-07-17 09:38:05 +02:00