Skip to content

Implemented refresh token rotation and secure cookie option#5

Merged
Ramjat19 merged 2 commits into
mainfrom
security
Nov 5, 2025
Merged

Implemented refresh token rotation and secure cookie option#5
Ramjat19 merged 2 commits into
mainfrom
security

Conversation

@Ramjat19
Copy link
Copy Markdown
Owner

@Ramjat19 Ramjat19 commented Nov 4, 2025

No description provided.

@vercel
Copy link
Copy Markdown

vercel Bot commented Nov 4, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
collab-code-review Ready Ready Preview Comment Nov 5, 2025 0:11am

Comment thread backend/src/app.ts Fixed
Comment thread backend/src/routes/auth.ts Fixed
Comment thread backend/src/routes/auth.ts Fixed
Comment thread backend/src/routes/auth.ts Fixed
Comment thread backend/src/app.ts
app.use(securityHeaders); // Additional custom security headers
app.use(corsConfig); // CORS policy
// Cookie parser (needed for refresh token cookie parsing)
app.use(cookieParser());

Check failure

Code scanning / CodeQL

Missing CSRF middleware High

This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.
This cookie middleware is serving a
request handler
without CSRF protection.

Copilot Autofix

AI 6 months ago

Copilot could not generate an autofix suggestion

Copilot could not generate an autofix suggestion for this alert. Try pushing a new commit or if the problem persists contact support.

@Ramjat19
Copy link
Copy Markdown
Owner Author

Ramjat19 commented Nov 5, 2025

To-do : missing CSRF middleware

@Ramjat19 Ramjat19 merged commit 506c801 into main Nov 5, 2025
16 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants