14 - Symfony 4 REST: Secure JWT Exchange with httponly cookie

preview_player
Показать описание

Well this video covers how you can set an httponly cookie in symfony 4 using lexik jwt authentication bundle, any questions are welcome.

Рекомендации по теме
Комментарии
Автор

If you want to use cookies between curl requests, like the browser does, use -c and -b flags. For example

Stefanvardar
Автор

You can do it automatically now in Check out in Lexik github -> documentation -> configuration -> under "2. Use the token" search for configuration reference -> Automatically generating cookies

Good luck :)

mavlft
Автор

Hello, Thank you for this video series which has helped me a lot. However, I have a question. How to retrieve the data of my current
user in the frontend (email, roles, username etc ..) since I do not have access to HTTPonly via the JS. Thanks.

richardleubou
Автор

Hey! I'm building an e-commerce app with a Symfony 4 backend, and i'm not sure if the front-end it's going to be on Vue or Angular. This videos are extremely helpful for me to understanding the security basics! But there is a thing, that i didn't see if you made a video for, that is deployment moment...

I'm familiar with basic webhostings, that as a complex feature it let me "turn on" NodeJS and nothing more. Wich kind of hosting is required for an app like you're developing on this videos (I mean, Vue+Symfony)? I don't know if a regular hosting, a VPS, or what should I use for this... Implying that it's not something even that big to use Docker images or something like that.

Sorry if this is not the medium for this question, but i didn't see a video about it :P

matiasnoriega
Автор

Nice video. Its very helpful . I have a question. I use Angular for front-end . What is the route to check if a user is logged in

petarkovachev
Автор

"Let's give it what it wants and let's give it a Cookie!" LOL

AnaisUrlichs
Автор

I don't understand why you set the secure to false? Why?

EversonAraujo
Автор

Nice vids but Use Insomnia (or Postman) for the calls

RM-zjzb