Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/ozh/yourls-enhanced-cookies
YOURLS plugin to harden auth cookies 🍪👮
https://github.com/ozh/yourls-enhanced-cookies
cookies yourls yourls-plugin
Last synced: 21 days ago
JSON representation
YOURLS plugin to harden auth cookies 🍪👮
- Host: GitHub
- URL: https://github.com/ozh/yourls-enhanced-cookies
- Owner: ozh
- Created: 2020-04-05T11:07:17.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2022-04-21T20:00:19.000Z (over 2 years ago)
- Last Synced: 2024-08-02T06:15:14.345Z (3 months ago)
- Topics: cookies, yourls, yourls-plugin
- Language: PHP
- Homepage:
- Size: 2.93 KB
- Stars: 4
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: readme.md
Awesome Lists containing this project
- awesome - Enhanced Auth Cookies - Enhances the cookie based authentication, making each auth cookie name unique and time based. (Plugins / E)
README
# Plugin for YOURLS : Enhanced Auth Cookies [![Listed in Awesome YOURLS!](https://img.shields.io/badge/Awesome-YOURLS-C5A3BE)](https://github.com/YOURLS/awesome-yourls/)
> This plugin requires YOURLS 1.7.7+
## What for
Out of the box, YOURLS auth cookies have site dependent unique name. This plugin enhances the cookie based authentication, making each auth cookie name unique and time based with a 1 minute expiration.
This plugin is a proof of concept to show how to customize your own authentication policy. Copy, edit it and build on it to suit your needs.
## How to
* In `/user/plugins`, create a new folder named `enhanced-cookies`
* Drop these files in that directory
* Go to the Plugins administration page and activate the plugin
* Have fun## FAQ
1. "it doesn't work!"
* Sorry, it does for me.2. "Why not make this core and default YOURLS behavior?"
* Because 99.9% of YOURLS users are just happy with the way things work out of the box. Adding feature means adding complexity and having to deal with all kind of setups and use cases. This is exactly why YOURLS has a plugin API: it allows feature for the 0.1% of people who really need it.## License
Do whatever the hell you want with it.