secrets

Ordering

Visibility

case class CookieSecret(value: String, expirationDate: DateTime) extends OAuth1TokenSecret with Product with Serializable
A token secret which gets persisted in a cookie.
A token secret which gets persisted in a cookie.
value
The token secret.
expirationDate
The expiration time.
class CookieSecretProvider extends OAuth1TokenSecretProvider
Saves the secret in a cookie.
case class CookieSecretSettings(cookieName: String = "OAuth1TokenSecret", cookiePath: String = "/", cookieDomain: Option[String] = None, secureCookie: Boolean = true, httpOnlyCookie: Boolean = true, sameSite: Option[SameSite] = Some(Cookie.SameSite.Lax), expirationTime: FiniteDuration = 5 minutes) extends Product with Serializable
The settings for the cookie secret.
The settings for the cookie secret.
cookieName
The cookie name.
cookiePath
The cookie path.
cookieDomain
The cookie domain.
secureCookie
Whether this cookie is secured, sent only for HTTPS requests.
httpOnlyCookie
Whether this cookie is HTTP only, i.e. not accessible from client-side JavaScript code.
sameSite
The SameSite attribute for this cookie (for CSRF protection).
expirationTime
Secret expiration. Defaults to 5 minutes which provides sufficient time to log in, but not too much. This is a balance between convenience and security.

Packages