Skip to Content (Press Enter)
2018-03-08 20-43-12
Robert Chanphakeo
4Views
1Comments
[oAuth Connectors] oAuth_Google: security risk, storing oauth refresh token in cookie 
Question
Forge
oauth-png
Web icon
oAuth Connectors (O11)
Forge asset by André Vieira
I had a look at the code for oAuth_Google

The oauth refresh token is stored in a web cookie, a more secured place to store the refresh token value is in the user session or in the database. 


0
0
09 Jul 2014
Copy Link
UserImage.jpg
Robbie Nati
Has Robert's suggestion been investigated and thus implemented??
0
0
03 Feb 2015
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.