Flexible authentication solution for Rails with Warden.
-
Updated
Mar 23, 2022 - Ruby
Authentication is the process of determining whether someone or something is, in fact, who or what it says it is. Authentication technology provides access control for systems by checking to see if a user's credentials match the credentials in a database of authorized users or in a data authentication server.
Is your feature request related to a problem? Please describe.
The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.
Describe the solution you'd like
New documenta
Description📓
https://github.com/nextauthjs/next-auth/blob/7636de4a340380c50dea39be3854d9b7d69be62b/packages/next-auth/src/next/middleware.ts#L84
Middleware is calling
getToken
directly without providing anydecode
methods. BygetToken()
usesjwtDecrypt
fromjose
package, and it will probably throws error when the JWT is not signed in the same way. It will throw error when we p