Skip to content

Security: dyllan-to-you/FAUScholarshipApplication

Security

docs/Security.md

Security

Authentication Schema

Authentication inspired by this StackOverflow answer - $username and $password will be submitted via POST to /admin/login/ - Currently, authentication is proven by having a session with a valid user - This is not sustainable TODO: - JWT Token is generated and saved to session/cookie - Token is checked for/required by all future requests. - Account name also added to cookie

CSRF

NOT IMPLEMENTED YET. There is middleware for Slim available at the following link

There aren’t any published security advisories