Casbin Forum runs on Casnode, the open-source Discourse-style forum. Try the Casnode demo →
Casbin Forum

Hey guys is there any endpoint that we can hit to generate and update the access keys ,please anyone if you know about it please let me know??

2views
2users
1 minread

Hey guys
Question: "We are currently authenticating with Casdoor by sending accessKey and accessSecret as query parameters to the /api/user endpoint, like so: /api/user?accessKey=exampleKey&accessSecret=exampleSecret. However, sending these keys as URL parameters seems insecure, as they could be exposed in network logs or browser history.

Is there a way to authenticate with Casdoor by sending accessKey and accessSecret in the request body instead? This approach would allow us to use a POST request and improve security. If this isn’t currently supported, are there any recommended workarounds?

sounds good to support it. Can you create a github issue? and a pull request would be even better?

1 / 5
Nov 2024