229a53fa0a
changes authentication to no longer use a refresh token & access token for accessing protected endpoints. Instead only an auth token is used. Before the login flow was: Login -> get refresh (stored as HttpOnly cookie) + access token (stored in memory) -> protected endpoint request (attach access token as Authorization header) -> access token expires in 15 minutes, so use refresh token to obtain new one when that happens now it looks like this: Login -> get auth token (stored as HttpOnly cookie) -> make protected endpont request (token sent) the reasoning for using the refresh + access token was to reduce DB calls, but in the end I don't think its worth the hassle.
32 lines
1.0 KiB
Modula-2
32 lines
1.0 KiB
Modula-2
module github.com/jordanknott/taskcafe
|
|
|
|
go 1.13
|
|
|
|
require (
|
|
github.com/99designs/gqlgen v0.13.0
|
|
github.com/RichardKnop/machinery v1.9.1
|
|
github.com/brianvoe/gofakeit/v5 v5.11.2
|
|
github.com/go-chi/chi v3.3.2+incompatible
|
|
github.com/go-chi/cors v1.2.0
|
|
github.com/golang-migrate/migrate/v4 v4.11.0
|
|
github.com/google/uuid v1.1.1
|
|
github.com/jinzhu/now v1.1.1
|
|
github.com/jmoiron/sqlx v1.2.0
|
|
github.com/lib/pq v1.3.0
|
|
github.com/lithammer/fuzzysearch v1.1.0
|
|
github.com/magefile/mage v1.11.0
|
|
github.com/manifoldco/promptui v0.8.0
|
|
github.com/matcornic/hermes/v2 v2.1.0
|
|
github.com/pelletier/go-toml v1.8.0 // indirect
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/shurcooL/vfsgen v0.0.0-20180121065927-ffb13db8def0
|
|
github.com/sirupsen/logrus v1.4.2
|
|
github.com/spf13/cobra v1.0.0
|
|
github.com/spf13/pflag v1.0.5 // indirect
|
|
github.com/spf13/viper v1.4.0
|
|
github.com/vektah/gqlparser/v2 v2.1.0
|
|
golang.org/x/crypto v0.0.0-20200709230013-948cd5f35899
|
|
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
|
|
gopkg.in/mail.v2 v2.3.1
|
|
)
|