alexferl / zerohttp / 23725360712

94%

Build Type

push

github

Committed by web-flow

Commit Message

feat(jwtauth): add cookie support with HttpOnly refresh tokens (#156)

* feat(jwtauth): add cookie support with HttpOnly refresh tokens

Add CookieConfig with secure defaults (HttpOnly, Secure, SameSite=Strict).
Add SetCookie/SetRefreshCookie/DeleteCookie helpers and cookie extractors.
Fix RefreshTokenHandler to not copy refresh token claims to access tokens.

Add jwtauth_cookie example demonstrating:
- HttpOnly cookies for XSS protection
- Separate access_token (Path: /) and refresh_token (Path: /auth) cookies
- CSP nonce integration for inline scripts/styles
- Token refresh and logout flows with automatic cookie handling

Signed-off-by: alexferl <me@alexferl.com>

* increase coverage

Signed-off-by: alexferl <me@alexferl.com>

* increase coverage

Signed-off-by: alexferl <me@alexferl.com>

---------

Signed-off-by: alexferl <me@alexferl.com>

Coverage Stats

186 of 206 new or added lines in 1 file covered. (90.29%)

5 existing lines in 3 files now uncovered.

10229 of 10900 relevant lines covered (93.84%)

541.0 hits per line