Edward Jiang

Simplicity is a replacement for the Facebook / Google SDKs, and just implements Facebook / Google login in a lightweight manner. It's extensible and will support other major authentication providers...

Add jwt as a property of JwtExceptions

4

When you try to parse the claims of a JWT, even when it fails validation, there may be instances where you would want to still read the claims. Talking with...

Update Method Signatures from the completed JWT spec

1

Talking with @lhazlewood today: JJWT was written against the draft JWT spec, and so there's some forms of terminology that are now "off". For instance, in JJWT, a JWT and...

Not sure if this is a feature or bug? 🙃 ```prisma model User { phoneNumber String @unique emailAddress String? @unique } ``` ```js objectType({ name: 'User', definition(t) { t.model.phoneNumber() t.model.emailAddress()...

Create a companion server that handles authorization_code flows

9

We can't implement Twitter, GitHub, LinkedIn, Slack, or other login types because we can't do authorization_code grants without a client secret. Client secrets are fundamentally insecure on mobile clients, so...

Can't return undefined in a resolver that allows an optional

2

If I define: ```graphql query { success: Boolean } ``` ```js // This will work resolve(_root, args, context) { return true } // This will work resolve(_root, args, context) {...

Link to "back to login" is off on the email verification page. on `express-stormpath 2.4.0` Appears as:  Expecting something like: ![screen shot...

Body-Parser interacts with express-stormpath weirdly

2

If I do: ``` app.use(bodyParser.json()) app.use(stormpath.init(app, {})) ``` express-stormpath breaks on any urlencoded things, and complains that body isn't set. Expected behavior: express-stormpath still parses form-urlencoded stuff.

In my latest blog post about [Stormpath on HyperDev](https://stormpath.com/blog/save-data-hyperdev-stormpath), I had to write sample code that looks like this: ``` js app.get('/global-counter', function(req, res) { req.app.get('stormpathApplication').getCustomData(function(err, customData) { if(!customData) {...

Default response should be JSON, if not specified

4

If I set: ``` app.use(stormpath.init(app, { web: { produces: ['application/json'] } })); ``` And I send a HTTP request to a route with `stormpath.loginRequired` without an `Accept` header, Stormpath redirects...