mxstbr/micro-github

Make the response mode configurable: fragment, query or form_post

Open

#7 aberto em 16 de fev. de 2017

Ver no GitHub
 (1 comment) (0 reactions) (0 assignees)JavaScript (58 forks)batch import
enhancementhelp wanted

Métricas do repositório

Stars
 (730 stars)
Métricas de merge de PR
 (Nenhuma PRs mesclada em 30d)

Description

For single page apps, you don't want to send the access tokens to the backend server. Putting the access token in the query string will do that. So for single page apps, you'll want to use the hash fragment instead (https://mysite.com#access_token=xyz).

For web applications you might want to use a form post instead of the query string. The end result is the same (both post and querystring will be available in the req), but the main difference is that with a form post the access token is not exposed in the browser history etc...

Guia do colaborador