{"action":"created","issue":{"url":"https://api.github.com/repos/jmikola/AutoLogin/issues/15","repository_url":"https://api.github.com/repos/jmikola/AutoLogin","labels_url":"https://api.github.com/repos/jmikola/AutoLogin/issues/15/labels{/name}","comments_url":"https://api.github.com/repos/jmikola/AutoLogin/issues/15/comments","events_url":"https://api.github.com/repos/jmikola/AutoLogin/issues/15/events","html_url":"https://github.com/jmikola/AutoLogin/pull/15","id":120403780,"number":15,"title":"Support of redirect after successful login and remember me functionality","user":{"login":"cmyker","id":1872718,"avatar_url":"https://avatars.githubusercontent.com/u/1872718?v=3","gravatar_id":"","url":"https://api.github.com/users/cmyker","html_url":"https://github.com/cmyker","followers_url":"https://api.github.com/users/cmyker/followers","following_url":"https://api.github.com/users/cmyker/following{/other_user}","gists_url":"https://api.github.com/users/cmyker/gists{/gist_id}","starred_url":"https://api.github.com/users/cmyker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cmyker/subscriptions","organizations_url":"https://api.github.com/users/cmyker/orgs","repos_url":"https://api.github.com/users/cmyker/repos","events_url":"https://api.github.com/users/cmyker/events{/privacy}","received_events_url":"https://api.github.com/users/cmyker/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-12-04T13:40:52Z","updated_at":"2016-03-30T20:40:48Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/jmikola/AutoLogin/pulls/15","html_url":"https://github.com/jmikola/AutoLogin/pull/15","diff_url":"https://github.com/jmikola/AutoLogin/pull/15.diff","patch_url":"https://github.com/jmikola/AutoLogin/pull/15.patch"},"body":"Support of redirect after successful login  for hiding auth token from url and browser history\r\nSupport of symfony's built-in remember me functionality"},"comment":{"url":"https://api.github.com/repos/jmikola/AutoLogin/issues/comments/203626180","html_url":"https://github.com/jmikola/AutoLogin/pull/15#issuecomment-203626180","issue_url":"https://api.github.com/repos/jmikola/AutoLogin/issues/15","id":203626180,"user":{"login":"g4vroche","id":491934,"avatar_url":"https://avatars.githubusercontent.com/u/491934?v=3","gravatar_id":"","url":"https://api.github.com/users/g4vroche","html_url":"https://github.com/g4vroche","followers_url":"https://api.github.com/users/g4vroche/followers","following_url":"https://api.github.com/users/g4vroche/following{/other_user}","gists_url":"https://api.github.com/users/g4vroche/gists{/gist_id}","starred_url":"https://api.github.com/users/g4vroche/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/g4vroche/subscriptions","organizations_url":"https://api.github.com/users/g4vroche/orgs","repos_url":"https://api.github.com/users/g4vroche/repos","events_url":"https://api.github.com/users/g4vroche/events{/privacy}","received_events_url":"https://api.github.com/users/g4vroche/received_events","type":"User","site_admin":false},"created_at":"2016-03-30T20:40:48Z","updated_at":"2016-03-30T20:40:48Z","body":"Hi,\r\nAny plans on merging this PR ?\r\n\r\nAt least the redirect part to remove the token is an absolute must have.\r\nIt should even be activated by default if not for BC. \r\nWithout redirect to remove the token, we time travel back in the old ?PHPSESSID time.\r\n\r\nAnd these days, with integrated support chats on websites, that shares a user's current URL to ambassadors, the user doesn't even have to do a copy/paste to leak an access to its account (true story).\r\n\r\nLet us know if any more work needs to be done before merging, or if we should split the PR to separate the remember_me feature, since this part looks like being more controversial (IMHO it is a totally legit option to have too, with a config switch of course).\r\n"}}