TrizTech/ohif-viewer
15
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: Switch token storage back to localStorage because in-memory was annoying for end users (#1030)

Browse Source
This commit is contained in:
Erik Ziegler 2019-10-11 14:53:49 +02:00 committed by GitHub
parent 659649e10b
commit 412fe4e23f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
platform/viewer/src/utils/getUserManagerForOpenIdConnectClient.js
View File

@ -1,6 +1,5 @@
// https://github.com/maxmantz/redux-oidc/blob/master/docs/API.md // https://github.com/maxmantz/redux-oidc/blob/master/docs/API.md
import { loadUser, createUserManager } from 'redux-oidc'; import { loadUser, createUserManager } from 'redux-oidc';
import { WebStorageStateStore, InMemoryWebStorage } from 'oidc-client';
/** /**
* Creates a userManager from oidcSettings; * Creates a userManager from oidcSettings;
@ -21,17 +20,12 @@ export default function(store, oidcSettings) {
return; return;
} }
// Do not store tokens in localStorage or sessionStorage
// https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/HTML5_Security_Cheat_Sheet.md#local-storage
const userStore = new WebStorageStateStore({ store: new InMemoryWebStorage() });
const settings = { const settings = {
...oidcSettings, ...oidcSettings,
automaticSilentRenew: true, automaticSilentRenew: true,
revokeAccessTokenOnSignout: true, revokeAccessTokenOnSignout: true,
filterProtocolClaims: true, filterProtocolClaims: true,
loadUserInfo: true, loadUserInfo: true,
userStore,
}; };
const userManager = createUserManager(settings); const userManager = createUserManager(settings);