improved code around cookie handling, added to docs

This commit is contained in:
Wyatt Johnson
2017-08-10 10:46:11 +10:00
parent b9243938bd
commit 6d70a7b20e
2 changed files with 20 additions and 6 deletions
+8
View File
@@ -123,6 +123,14 @@ will be used:
}
```
When our passport middleware checks for JWT tokens, it searches in the following
order:
1. Custom cookies named from the list in `TALK_JWT_COOKIE_NAMES`.
2. Default cookies named `TALK_JWT_COOKIE_NAME` then `TALK_JWT_SIGNING_COOKIE_NAME`.
3. Query parameter `?access_token={TOKEN}`.
4. Header: `Authorization: Bearer {TOKEN}`.
### Email
- `TALK_SMTP_EMAIL` (*required for email*) - the address to send emails from