OAuth token non-retentive #77

New issue

Open

opened 2020-05-25 18:34:12 +00:00 by Melli · 2 comments

Melli commented

2020-05-25 18:34:12 +00:00

Member

Hi! I noticed whenever I use the MastoFE that the OAuth tokens aren't saved anywhere other than for a session, unlike the PleromaFE the MastoFE will ask for a new OAuth token each session. Is there by chance a possibility that by hosting both MastoFE and PleromaFE on the same domain it interferes with the login tokens?
Is there any way of making sessions last in MastoFE like they do in the PleromaFE?

Hi! I noticed whenever I use the MastoFE that the OAuth tokens aren't saved anywhere other than for a session, unlike the PleromaFE the MastoFE will ask for a new OAuth token each session. Is there by chance a possibility that by hosting both MastoFE and PleromaFE on the same domain it interferes with the login tokens? Is there any way of making sessions last in MastoFE like they do in the PleromaFE?

lanodan commented

2020-05-25 19:23:39 +00:00

Owner

Has nothing to do with pleroma-fe, more likely to do with the significant lack of testing&reporting. (I personally only have ephemeral sessions in my browser)

Not really sure what's going on, will try to debug, I thought it was a bug in chromium in one of my tests.

Has nothing to do with pleroma-fe, more likely to do with the significant lack of testing&reporting. (I personally only have ephemeral sessions in my browser) Not really sure what's going on, will try to debug, I thought it was a bug in chromium in one of my tests.

Melli commented

2020-05-25 19:27:54 +00:00

Author

Member

Ah! Alright, I thought it was possibly the way how the MastoFE handled the OAuth token.
And thanks! I will be trying to inspect the code a bit too how it handles the token since I was doing that anyway, I will report my results if I got any.

Ah! Alright, I thought it was possibly the way how the MastoFE handled the OAuth token. And thanks! I will be trying to inspect the code a bit too how it handles the token since I was doing that anyway, I will report my results if I got any.

Commenting is not possible because the repository is archived.