{"action":"created","issue":{"url":"https://api.github.com/repos/guyskk/flask-restaction/issues/9","repository_url":"https://api.github.com/repos/guyskk/flask-restaction","labels_url":"https://api.github.com/repos/guyskk/flask-restaction/issues/9/labels{/name}","comments_url":"https://api.github.com/repos/guyskk/flask-restaction/issues/9/comments","events_url":"https://api.github.com/repos/guyskk/flask-restaction/issues/9/events","html_url":"https://github.com/guyskk/flask-restaction/issues/9","id":176229718,"number":9,"title":"Considering support auth token in cookies","user":{"login":"guyskk","id":6367792,"avatar_url":"https://avatars.githubusercontent.com/u/6367792?v=3","gravatar_id":"","url":"https://api.github.com/users/guyskk","html_url":"https://github.com/guyskk","followers_url":"https://api.github.com/users/guyskk/followers","following_url":"https://api.github.com/users/guyskk/following{/other_user}","gists_url":"https://api.github.com/users/guyskk/gists{/gist_id}","starred_url":"https://api.github.com/users/guyskk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/guyskk/subscriptions","organizations_url":"https://api.github.com/users/guyskk/orgs","repos_url":"https://api.github.com/users/guyskk/repos","events_url":"https://api.github.com/users/guyskk/events{/privacy}","received_events_url":"https://api.github.com/users/guyskk/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/guyskk/flask-restaction/milestones/1","html_url":"https://github.com/guyskk/flask-restaction/milestones/0.24.0","labels_url":"https://api.github.com/repos/guyskk/flask-restaction/milestones/1/labels","id":1996408,"number":1,"title":"0.24.0","description":null,"creator":{"login":"guyskk","id":6367792,"avatar_url":"https://avatars.githubusercontent.com/u/6367792?v=3","gravatar_id":"","url":"https://api.github.com/users/guyskk","html_url":"https://github.com/guyskk","followers_url":"https://api.github.com/users/guyskk/followers","following_url":"https://api.github.com/users/guyskk/following{/other_user}","gists_url":"https://api.github.com/users/guyskk/gists{/gist_id}","starred_url":"https://api.github.com/users/guyskk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/guyskk/subscriptions","organizations_url":"https://api.github.com/users/guyskk/orgs","repos_url":"https://api.github.com/users/guyskk/repos","events_url":"https://api.github.com/users/guyskk/events{/privacy}","received_events_url":"https://api.github.com/users/guyskk/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":0,"state":"open","created_at":"2016-09-11T08:15:58Z","updated_at":"2016-09-11T08:15:58Z","due_on":null,"closed_at":null},"comments":2,"created_at":"2016-09-11T08:15:26Z","updated_at":"2016-09-14T01:21:04Z","closed_at":null,"body":"在服务端返回文件供浏览器下载的情况下，无法用JS操作请求头，所以无法传递token。\r\n\r\n目前考虑允许通过cookies传递token，这涉及到一些安全考虑：\r\n\r\n- token 要不要加密？\r\n- cookie 是否要设置为HttpOnly？\r\n- 存储在localstorage中的token是否去掉，去除通过请求头传递token的方式?\r\n"},"comment":{"url":"https://api.github.com/repos/guyskk/flask-restaction/issues/comments/246877658","html_url":"https://github.com/guyskk/flask-restaction/issues/9#issuecomment-246877658","issue_url":"https://api.github.com/repos/guyskk/flask-restaction/issues/9","id":246877658,"user":{"login":"guyskk","id":6367792,"avatar_url":"https://avatars.githubusercontent.com/u/6367792?v=3","gravatar_id":"","url":"https://api.github.com/users/guyskk","html_url":"https://github.com/guyskk","followers_url":"https://api.github.com/users/guyskk/followers","following_url":"https://api.github.com/users/guyskk/following{/other_user}","gists_url":"https://api.github.com/users/guyskk/gists{/gist_id}","starred_url":"https://api.github.com/users/guyskk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/guyskk/subscriptions","organizations_url":"https://api.github.com/users/guyskk/orgs","repos_url":"https://api.github.com/users/guyskk/repos","events_url":"https://api.github.com/users/guyskk/events{/privacy}","received_events_url":"https://api.github.com/users/guyskk/received_events","type":"User","site_admin":false},"created_at":"2016-09-14T01:21:04Z","updated_at":"2016-09-14T01:21:04Z","body":"https://www.v2ex.com/t/306017\r\nhttp://stackoverflow.com/questions/26739167/jwt-json-web-token-automatic-prolongation-of-expiration\r\n"}}
{"actor":{"display_login":"guyskk"}}