Class OahRefreshTokenCookieWriter

java.lang.Object
com.github.catomat0.oauthhelper.jwt.OahRefreshTokenCookieWriter

public class OahRefreshTokenCookieWriter extends Object
Refresh token 을 HttpOnly 쿠키로 관리하는 헬퍼.

OahSignupTokenCookieWriter 와 대칭 구조.

XSS 로 refresh 토큰 탈취 방어 — body 로 전달하지 말고 이 헬퍼로 쿠키 세팅 권장.

  • Constructor Details

    • OahRefreshTokenCookieWriter

      public OahRefreshTokenCookieWriter(OahJwtProperties properties)
  • Method Details

    • write

      public void write(jakarta.servlet.http.HttpServletResponse response, String refreshToken)
    • read

      public String read(jakarta.servlet.http.HttpServletRequest request)
    • read

      public String read(jakarta.servlet.http.HttpServletRequest request, String cookieName)
    • clear

      public void clear(jakarta.servlet.http.HttpServletResponse response)