Do Not Implicitly Validate Session Cookie #36
Loading…
x
Reference in New Issue
Block a user
No description provided.
Delete Branch "validate"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The goal is to make /api/session/validate return true or false depending on if the session is valid. This is impossible if the session is implicitly validated and throws an error when it is invalid because the method that returns true or false is no longer called.
Assuming auth methods will fail regardless if the session is invalid. [Confirmed in a quick check]