My current authentication system looks like this: On entering username and password, the login endpoint is called (not a form action) that authenticates the user. A new session (row in an internal table) is created for this user, and this session id is put in the session cookie. On every request, …

[image] adarsh1021: Once the bearer token expires, what do I do? To get access to the refresh token I need access to the cookies, which again means I need a CSRF token? Before the token expires, a request is made to an endpoint that is responsible for generating another access token. The serv…

Elixir Programming Language Forum

CSRF issue when using session based authentication for json APIs

Questions & Help Questions

adarsh1021 July 29, 2023, 8:41am 3

This is helpful, thank you!!