{"push_id":937775232,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"b15ab3b3e159f8dae8bc6caf4d9d9937fa0faf6f","before":"f7023bdece615114ca4f7503520c5807750ceda3","commits":[{"sha":"b15ab3b3e159f8dae8bc6caf4d9d9937fa0faf6f","author":{"email":"7cd32382d83225d94b49e1f9560d94c146491038@gmail.com","name":"Harald Held"},"message":"Authentication should now be secure ... and meant for web apps only.\n\nThe JWT is now stored in a secure HTTP-only cookie, as is a CSRF-token\nin a cookie readable by Javascript (still secure). Protected endpoints\nexpect the header X-Csrf-Token to contain the value from the CSRF\ncookie. Only if that token turns out to match too will the\nauthentication be OK.\n\nThe server is now SSL encrypted too.","distinct":true,"url":"https://api.github.com/repos/hheld/UserAdminWebApp/commits/b15ab3b3e159f8dae8bc6caf4d9d9937fa0faf6f"}]}