Skip to content
Snippets Groups Projects

Broken Auth (no exp date manipulation)

    • Closed Issue created by Alvin Limassa @AlvinLimassa
    Edited

      Child items

      0
      Show labels

      No child items are currently assigned. Use child items to break down this issue into smaller parts.

        Activity

        • Alvin Limassa changed title from Broken Auth (no token exp time validation) to Broken Auth (no exp date manipulation)

          changed title from Broken Auth (no token exp time validation) to Broken Auth (no exp date manipulation)

        • Alvin Limassa mentioned in commit a07ae834

          mentioned in commit a07ae834

        • Alvin Limassa closed

          closed

        • Alvin Limassa
          Alvin Limassa @AlvinLimassa ·
          Author Owner

          Auth hanya melakukan pengecekan terhadap token yang ada didatabase, waktu exp dicek berdasarkan cookies yang ada. Apabila waktu exp di cookies diganti maka sistem akan tetap menganggap user telah login.

          Solve : sistem ditambahkan validasi exp date berdasarkan waktu yang ada pada database bukan waktu yang ada pada cookies.

        Please register or sign in to reply