package secrets
- Alphabetic
- Public
- Protected
Type Members
- case class CookieSecret(value: String, expirationDate: ZonedDateTime) extends OAuth1TokenSecret with Product with Serializable
A token secret which gets persisted in a cookie.
A token secret which gets persisted in a cookie.
- value
The token secret.
- expirationDate
The expiration time.
- class CookieSecretProvider extends OAuth1TokenSecretProvider
Saves the secret in a cookie.
- case class CookieSecretSettings(cookieName: String = "OAuth1TokenSecret", cookiePath: String = "/", cookieDomain: Option[String] = None, secureCookie: Boolean = true, httpOnlyCookie: Boolean = true, sameSite: Option[SameSite] = Some(Cookie.SameSite.Lax), expirationTime: FiniteDuration = 5.minutes) extends Product with Serializable
The settings for the cookie secret.
The settings for the cookie secret.
- cookieName
The cookie name.
- cookiePath
The cookie path.
- cookieDomain
The cookie domain.
- secureCookie
Whether this cookie is secured, sent only for HTTPS requests.
- httpOnlyCookie
Whether this cookie is HTTP only, i.e. not accessible from client-side JavaScript code.
- sameSite
The SameSite attribute for this cookie (for CSRF protection).
- expirationTime
Secret expiration. Defaults to 5 minutes which provides sufficient time to log in, but not too much. This is a balance between convenience and security.
Value Members
- object CookieSecret extends Serializable
The cookie secret companion object.
- object CookieSecretProvider
The CookieSecretProvider companion object.