Timeline for How to handle CSRF protection in a single page application?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 19, 2019 at 10:44 | comment | added | Callam Delaney | Doesn't address multi-service workflows, oidc is probably also incompatible with this approach. | |
| Jan 5, 2017 at 12:19 | comment | added | billc.cn | @dandavis The fact that any resource that needs CORS probably can't use session cookies and will need alternative authentication like a token anyways. | |
| Jan 4, 2017 at 22:11 | comment | added | dandavis | what problems with CORS are you referring to? | |
| Jan 4, 2017 at 17:37 | history | answered | billc.cn | CC BY-SA 3.0 |