be7a7977ac
refactor: need to pass api name to SetAuthCookie
ee8fa2b98d
refactor: dont pass a domain
ad8de8f5a1
refactor: switch to using MaxAge
9587ef4941
refactor: require an api name to be provided and skip if not matched
bba7ce59d3
refactor: nop on onError
9332598627
refactor: pass ret as a HttpError
6ce3b02dc6
dep: update portal-sdk
81d52d2524
refactor: ret should now satisfy HttpError
64e2216a36
dep: update portal-sdk
Misc Dashboard Changes
No, I mean just make a commit to remove so it can be reverted later... and yes, all nets design their data structures in very different ways.
The goal as well is the portal will…
55fc51ad0a
refactor: update more methods to return an error optionally, and switch to a custom Error child class so we can get the status code and message
bec75e63ee
refactor: fix handling of check by creating a handleCheckResponse wrapper to translate success to authenticated
4a3028f61a
fix: cookies sent to us don't include the expiry time, so we need to parse from thr jwt echo it.
6c0ae8c0e6
refactor: if unauthorized is true, audList may be nil, and we may have to manually parse out the aud unverified to test
2528fd0afe
refactor: add optionExpiredAllowed to AuthMiddlewareOptions, add jwtPurposeEqual helper, don't error if expired with ExpiredAllowed and the purposes are different
bee80a9981
Revert "refactor: if the token doesn't match our purpose only error if EmptyAllowed is off"